Fedora Repository

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Fedora Repository records in CISA KEV

No Fedora Repository vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fcrepo 2 records HIGH

Records

2 records

TI-2025-16825 CVE-2025-23012 · GHSA-rrq3-36q9-c259

Fedora Repository fedoraIntCallUser default credentials

HIGH 77

Fedora Repository 3.8.x includes a service account (fedoraIntCallUser) with default credentials and privileges to read read local files by manipulating datastreams.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00433 Published 2025-01-23 No fix listed CWE-1392

TI-2025-16824 CVE-2025-23011 · GHSA-p2j4-x5h5-fmjm

Fedora Repository archive extraction path traversal

HIGH 73

Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip").

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00759 Published 2025-01-23 No fix listed CWE-23

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0