Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:pagure:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Pagure (689ea340-5073-568d-9162-4a19b8eac8c7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/pagure |
purl2cpe | 2026-06-01 10:12:53.637301 |
pkg:deb/ubuntu/pagure |
purl2cpe | 2026-06-01 10:12:53.637303 |
pkg:github/pagure/pagure |
purl2cpe | 2026-06-01 10:12:53.637305 |
pkg:rpm/fedora/pagure |
purl2cpe | 2026-06-01 10:12:53.637306 |
pkg:rpm/opensuse/pagure |
purl2cpe | 2026-06-01 10:12:53.637308 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4982 |
vulnerable | 2026-06-08 06:52:08.691533 |
Pagure: path traversal in view_issue_raw_file()
HIGH (7.6)
A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server.
Published: 2025-05-12T19:01:45.824Z
Updated: 2025-05-12T19:16:28.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4981 |
vulnerable | 2026-06-08 06:52:08.690809 |
Pagure: _update_file_in_git() follows symbolic links in temporary clones
HIGH (7.6)
A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.
Published: 2025-05-12T18:55:08.744Z
Updated: 2025-05-12T19:05:43.641Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11556 |
vulnerable | 2026-06-08 05:12:37.651399 |
Details available
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
Published: 2020-09-25T05:56:42.000Z
Updated: 2024-08-04T22:55:40.931Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1002151 |
vulnerable | 2026-06-08 05:08:34.825624 |
Details available
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization
Published: 2017-09-14T13:00:00.000Z
Updated: 2024-09-17T02:36:30.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1000037 |
vulnerable | 2026-06-08 05:07:16.840157 |
Details available
Pagure: XSS possible in file attachment endpoint
Published: 2019-11-06T18:27:55.000Z
Updated: 2024-08-06T03:47:34.824Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.