Fcrepo vulnerabilities

2 known vulnerabilities in Fcrepo from Fedorarepository. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Fedora Repository: Use of Default Credentials

  CVE-2025-23012Jan 23, 2025Fedora Repository

  Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a cu

• 8.8 High severity

  Fedora Repository: Relative Path Traversal

  CVE-2025-23011Jan 23, 2025Fedora Repository

  Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticat