๐Ÿ” CVE Alert

CVE-2024-4982

HIGH 7.6

Pagure: path traversal in view_issue_raw_file()

CVSS Score
7.6
EPSS Score
0.0%
EPSS Percentile
0th

A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server.

CWE CWE-22
Published May 12, 2025
Last Updated May 12, 2025
Stay Ahead of the Next One

Get instant alerts for

Be the first to know when new high vulnerabilities are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
Low

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
access.redhat.com: https://access.redhat.com/security/cve/CVE-2024-4982 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2279411 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2280726 pagure.io: https://pagure.io/pagure/c/c43844d23c919133fc983fe8c0f1dfb3b86e67d0