CVE-2024-47516
Pagure: argument injection in pagurerepo.log()
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Pagure: argument injection in pagurerepo.log()
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance.
Reserved 2024-09-25 | Published 2025-03-25 | Updated 2025-03-26 | Assigner redhatImproper Neutralization of Argument Delimiters in a Command ('Argument Injection')
| 2024-10-01: | Reported to Red Hat. |
| 2024-10-01: | Made public. |
access.redhat.com/security/cve/CVE-2024-47516
bugzilla.redhat.com/show_bug.cgi?id=2315805 (RHBZ#2315805)
Support options
