2 matches found
CVE-2026-90959
A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...
8.1CVSS5.7AI score0.00316EPSS
SaveExploits0References2
CVE-2026-90959
A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...
8.1CVSS5.8AI score0.00316EPSS
SaveExploits0References3
20