CVE-2024-4981
Fixed in a distro release EPSS <1%CVSS 7.6
A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.
Products: redhat pagure
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | pagure | 5.11.3+dfsg-1+deb11u1 |
| Debian 13 | pagure | 5.14.1+dfsg-1 |
| Ubuntu 22.04 LTS | pagure | 5.11.3+dfsg-1ubuntu0.1 |
| Ubuntu 24.04 LTS | pagure | 5.11.3+dfsg-2.1ubuntu0.2 |
| Ubuntu Pro 20.04 LTS | pagure | 5.8.1+dfsg-3ubuntu0.1~esm1 |