Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8
CVE-2025-23011
- EPSS 3.21%
- Veröffentlicht 23.01.2025 21:15:15
- Zuletzt bearbeitet 19.09.2025 18:30:34
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an una...
8.7
CVE-2025-23012
- EPSS 0.09%
- Veröffentlicht 23.01.2025 21:15:15
- Zuletzt bearbeitet 07.10.2025 16:47:21
Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migra...
1