High
CVSS 7.6
Overview
A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server.
CVE-2024-4982
A directory traversal vulnerability was discovered in Pagure server. If a malici...
Risk analysis
This vulnerability is rated 🟠 HIGH.
- CVSS: 7.6 (HIGH)
- Detected tags: path (tag impact: MODERATE)
Recommended actions:
- Canonicalize path; block `..` traversal; use allowlists.