CVE-2024-4981 — Pagure: _update_file_in_git() follows symbolic links in temporary clones
A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and m…
Published: 2025-05-12 · CVSS: 7.6 · CVSS 3.1
A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7