Skip to content
OpenAdvisories

Vendor

Fedora Repository

2 known vulnerabilities.

Products

Fedora Repository 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-23012

    Fedora Repository fedoraIntCallUser default credentials

    Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a c…

    Fedora Repository Fedora Repository
  • High 8.8
    CVE-2025-23011

    Fedora Repository archive extraction path traversal

    Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthentica…

    Fedora Repository Fedora Repository