CVE-2024-4981

Katalog CVE

CVSS 7.1 · High EPSS 0,43%

Kerentanan Files or Directories Accessible to External Parties pada redhat pagure. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.

Rincian

Terbit di NVD

12 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 34,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2024-4981 advisory vendor
• https://pagure.io/pagure/c/454f2677bc50d7176f07da9784882eb2176537f4 patch
• https://bugzilla.redhat.com/show_bug.cgi?id=2280723 exploit · issue tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=2278745 permissions required