Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-4981

A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.

Published

2025-05-12T19:15:47.747

Last Modified

2025-08-07T00:19:37.390

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.6 (HIGH)

Weaknesses

Type: Secondary
CWE-552

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	redhat	pagure	< 5.14.1	Yes

References

https://access.redhat.com/security/cve/CVE-2024-4981 Vendor Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2278745 Permissions Required ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2280723 Exploit, Issue Tracking ([email protected])
https://pagure.io/pagure/c/454f2677bc50d7176f07da9784882eb2176537f4 Patch ([email protected])