Fedora Repository vulnerabilities
We track 2 vulnerabilities in Fedora Repository products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2025.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Fedora Repository vulnerabilities
- 7.5 High severity
Fedora Repository: Use of Default Credentials
Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a cu
- 8.8 High severity
Fedora Repository: Relative Path Traversal
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticat