Количество 3
Количество 3
CVE-2025-23011
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticated GET request. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).
GHSA-p2j4-x5h5-fmjm
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticated GET request. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).
BDU:2026-00528
Уязвимость набора вложенных под каталогов на ftp- или http-серверах Fedora Repository, связанная с ошибками в обработке относительного пути к каталогу, позволяющая нарушителю удалять произвольные файлы в файловой системе
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-23011 Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticated GET request. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23). | CVSS3: 8.8 | 1% Низкий | около 1 года назад |
| GHSA-p2j4-x5h5-fmjm Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticated GET request. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23). | CVSS3: 8.8 | 1% Низкий | около 1 года назад |
 | BDU:2026-00528 Уязвимость набора вложенных под каталогов на ftp- или http-серверах Fedora Repository, связанная с ошибками в обработке относительного пути к каталогу, позволяющая нарушителю удалять произвольные файлы в файловой системе | CVSS3: 8.8 | 1% Низкий | около 1 года назад |
Уязвимостей на страницу