CVE-2020-24614

🗓️ 25 Aug 2020 14:15:16Reported by [email protected]Type

Fossil versions before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allow remote authenticated users to execute arbitrary code. Attacker needs check-in privileges on the repository

Reporter	Title	Published	Views	Family All 30
ATTACKERKB	CVE-2020-24614	25 Aug 202014:15	–	attackerkb
CNVD	Fossil Remote Code Execution Vulnerability	26 Aug 202000:00	–	cnvd
CVE	CVE-2020-24614	25 Aug 202013:36	–	cve
Cvelist	CVE-2020-24614	25 Aug 202013:36	–	cvelist
Debian CVE	CVE-2020-24614	25 Aug 202013:36	–	debiancve
EUVD	EUVD-2020-17331	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 33 Update: fossil-2.12.1-1.fc33	5 Dec 202001:40	–	fedora
Fedora	[SECURITY] Fedora 32 Update: fossil-2.12.1-1.fc32	5 Dec 202001:16	–	fedora
Tenable Nessus	Fedora 32 : fossil (2020-50be892d25)	7 Dec 202000:00	–	nessus
Tenable Nessus	Fedora 33 : fossil (2020-ac6cf99f87)	7 Dec 202000:00	–	nessus

NVD

Node

fossil-scm fossilRange<2.10.2

fossil-scm fossilRange2.11.0–2.11.2

fossil-scm fossilRange2.12.0–2.12.1

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

opensuse backports_sleMatch15.0sp1

opensuse backports_sleMatch15.0sp2

opensuse leapMatch15.1

opensuse leapMatch15.2

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVZK4K7SFBQRCGCHS76HW2LTSEH2KSUM/
fossil-scm	www.fossil-scm.org/fossil/vdiff
openwall	www.openwall.com/lists/oss-security/2020/08/20/1
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00065.html
openwall	www.openwall.com/lists/oss-security/2020/08/25/1
fossil-scm	www.fossil-scm.org/forum/info/a05ae3ce7760daf6
security	www.security.gentoo.org/glsa/202011-04
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARYF4YMYXCANXUDS3B3CA4JGUZNUJOJA/

17 Jun 2026 03:05Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

CVSS 3.18.8

EPSS0.03122

CWE-862