Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-47515

Pagure: generate_archive() follows symbolic links in temporary clones

Description

A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of the Pagure instance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pagure

  • 5.14.1affected

References