Fedorarepository vulnerabilities
We track 2 vulnerabilities in Fedorarepository products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2025.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Fedorarepository vulnerabilities
- 7.5 High severity
Fedora Repository: Use of Default Credentials
Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a cu
- 8.8 High severity
Fedora Repository: Relative Path Traversal
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticat