Skip to content
OpenAdvisories
High VA-25-021-01 2 CVEs

Fedora Repository fedoraIntCallUser default credentials and insecure archive extraction

Published Jan 23, 2025 · Updated Jan 23, 2025

Vendor: Fedora Repository Product: Fedora Repository

Summary

Fedora Repository 3.8 includes default user credentials and allows path traversal when extracting uploaded archive files. An attacker can exploit these vulnerabilities to read sensitive data and execute arbitrary commands with the privileges of the Java web application server. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained.

Details

Information Technology

Vulnerabilities 2

  • High 8.8
    CVE-2025-23011

    Fedora Repository archive extraction path traversal

    Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthentica…

    Fedora Repository Fedora Repository
  • High 7.5
    CVE-2025-23012

    Fedora Repository fedoraIntCallUser default credentials

    Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a c…

    Fedora Repository Fedora Repository

Revision history

  1. #1.0.0

    Initial publication