121 matches found
SUSE CVE-2024-4982
A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server...
PT-2024-33692 · Pagure +1 · Pagure +1
Name of the Vulnerable Software and Affected Versions: Pagure affected versions not specified Description: The issue concerns a symlink following vulnerability in Pagure's update file in git function, allowing for arbitrary file manipulation. Recommendations: At the moment, there is no informatio...
SUSE CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint...
SUSE CVE-2019-7628
Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle attackers to read these e-mails and gain access to Pagure on behalf of other users. This issue is found in the API token expiration reminder cron job in...
SUSE CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
Mageia: Security Advisory (MGASA-2021-0206)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated pagure packages fix a security vulnerability
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
MGASA-2021-0206 Updated pagure packages fix a security vulnerability
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
OPENSUSE-SU-2020:1810-1 Security update for pagure
This update for pagure fixes the following issues: - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view boo1176987 This update was imported from the openSUSE:Leap:15.1:Update update project...
Security update for pagure (moderate)
openSUSE Security Update: Security update for pagure Announcement ID: openSUSE-SU-2020:1810-1 Rating: moderate References: 1176987 Cross-References: CVE-2019-11556 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update fo...
openSUSE: Security Advisory for pagure (openSUSE-SU-2020:1765-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : pagure (openSUSE-2020-1765)
This update for pagure fixes the following issues : - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view boo1176987 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-1765. The text...
OPENSUSE-SU-2020:1765-1 Security update for pagure
This update for pagure fixes the following issues: - CVE-2019-11556: Fixed XSS via the templates/blame.html blame view boo1176987...
Security update for pagure (moderate)
openSUSE Security Update: Security update for pagure Announcement ID: openSUSE-SU-2020:1765-1 Rating: moderate References: 1176987 Cross-References: CVE-2019-11556 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for pagure...
Pagure Input Validation Error Vulnerability
Pagure is a Git repository written in Python to provide Web services. A cross-site scripting vulnerability exists in Pagure versions prior to 5.6, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
Cross site scripting
Pagure before 5.6 allows XSS via the templates/blame.html blame view...
