Fedorarepository Fcrepo
2 CVEs affecting Fedorarepository Fcrepo. Latest disclosed: 2025-01-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-23011 | High | 8.8 | 2025-01-23 | Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted a… |
CVE-2025-23012 | High | 7.5 | 2025-01-23 | Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastr… |