In Gitea through 1.17.1, repo cloning can occur in the migration function.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*" ] }