5 matches found
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint
CVE-2024-4982
A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server.
CVE-2017-1002151
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization
CVE-2024-4981
A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.