CVE-2016-1000037

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7EHB2WQ46M737B2STHQTOPTBSSQJDSS
• raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000037.json · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2016-1000037 · Third Party Advisory

pagure のその他の脆弱性

• CVE-2024-4982中 6.5A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they co…
• CVE-2024-4981高 7.1A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could u…
• CVE-2019-11556中 6.1Pagure before 5.6 allows XSS via the templates/blame.html blame view.
• CVE-2019-7628中 5.9Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle atta…
• CVE-2017-1002151高 7.5Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization