CVE-2024-4982TRUNG BÌNH 6.5A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they co…
CVE-2024-4981CAO 7.1A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could u…
CVE-2019-11556TRUNG BÌNH 6.1Pagure before 5.6 allows XSS via the templates/blame.html blame view.
CVE-2019-7628TRUNG BÌNH 5.9Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle atta…
CVE-2017-1002151CAO 7.5Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization