CVE-2024-47516: Pagure: argument injection in pagurerepo.log()
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance.
Other sources
An argument injection on Git during retrieval of repository history leads to remote code execution on the Pagure instance.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47516?
CVE-2024-47516 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-47516?
To fix CVE-2024-47516, update the Pagure software to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2024-47516?
CVE-2024-47516 is an argument injection vulnerability that results in remote code execution.
Who is affected by CVE-2024-47516?
CVE-2024-47516 affects Pagure instances that utilize Git for repository history retrieval.
What can happen if CVE-2024-47516 is exploited?
If exploited, CVE-2024-47516 can allow an attacker to execute arbitrary code on the affected Pagure instance.