CVE-2019-7628

Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle attackers to read these e-mails and gain access to Pagure on behalf of other users. This issue is found in the API token expiration reminder cron job in...

Pagure Authorization Vulnerability

Pagure is a Git repository using Python to provide Web services . Security exists in Pagure 3.3.0 and earlier versions, and the vulnerability stems from a failure to properly authorize. An attacker can exploit the vulnerability to browse a private repository...

CVE-2017-1002151

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

CVE-2017-1002151

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

Authorization

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

CVE-2017-1002151

Summary (CVE-2017-1002151) : Pagure 3.3.0 and earlier is vulnerable due to a failure to properly authorize, enabling an attacker to access (browse) private repositories. The credible details from connected documents indicate this is a repository hosting/web service vulnerability arising from impr...

CVE-2017-1002151

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

CVE-2017-1002151

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

Pagure Cross-Site Scripting Vulnerability

Pagure is a Git repository using Python to provide Web services . A cross-site scripting vulnerability exists in Pagure version 2.2.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2016-1000007

Pagure 2.2.1 XSS in raw file endpoint...

CVE-2016-1000007

Pagure 2.2.1 XSS in raw file endpoint...

Default credentials

Pagure 2.2.1 XSS in raw file endpoint...

CVE-2016-1000007

Pagure 2.2.1 XSS in raw file endpoint...

CVE-2016-1000007

The connected records confirm a concrete vulnerability: Pagure 2.2.1 contains a Cross-Site Scripting (XSS) flaw specifically in the raw file endpoint. The NVD entry CVE-2016-1000007 documents this XSS issue, and CNVD also references Pagure 2.2.1 XSS in the same context. Public references in these...

CVE-2016-1000007

Pagure 2.2.1 XSS in raw file endpoint...

Fedora Update for pagure FEDORA-2016-40d5f1d3c2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : pagure (2016-40d5f1d3c2)

CVE-2016-1000037 ---- Update to 2.3.3 Be sure to read UPGRADING.rst Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 24 Update: pagure-2.3.4-1.fc24

Pagure is a light-weight git-centered forge based on pygit2. Currently, Pagure offers a web-interface for git repositories, a ticket system and possibilities to create new projects, fork existing ones and create/merge pull-requests across or within projects...

Fedora Update for pagure FEDORA-2016-dede12f0a2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : pagure (2016-dede12f0a2)

Update to 2.2.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...