CVE-2024-4982
Fixed in a distro release EPSS <1%CVSS 7.6
A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server.
Products: redhat pagure
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | pagure | 5.11.3+dfsg-1+deb11u1 |
| Debian 13 | pagure | 5.14.1+dfsg-1 |
| Ubuntu 22.04 LTS | pagure | 5.11.3+dfsg-1ubuntu0.1 |
| Ubuntu 24.04 LTS | pagure | 5.11.3+dfsg-2.1ubuntu0.2 |
| Ubuntu Pro 20.04 LTS | pagure | 5.8.1+dfsg-3ubuntu0.1~esm1 |