Upstream information
Description
A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
CNA (Fedora Project) | |
---|---|
Base Score | 7.6 |
Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | Low |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | High |
Integrity Impact | Low |
Availability Impact | Low |
CVSSv3 Version | 3.1 |
No SUSE Security Announcements cross referenced.
SUSE Timeline for this CVE
CVE page created: Thu May 16 02:00:12 2024CVE page last modified: Tue May 13 14:04:59 2025