CVE-2024-47515 Pagure: generate_archive() follows symbolic links in temporary clones
A malicious user can exploit symbolic link handling in archive generation to disclose local files on the Pagure server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-47515?
CVE-2024-47515 is a high-severity path traversal vulnerability, published on 24 Dec 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. This flaw allows a malicious user to take advantage of the Pagure instance.
Weakness: CWE-61
Which versions are affected by CVE-2024-47515?
How do I fix CVE-2024-47515?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-47515 being exploited?
There is no known exploitation of CVE-2024-47515 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2024-47515, GHSA-jc9g-44f2-xqh4, UBUNTU-CVE-2024-47515.