CVE-2025-23011

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-23011
Fedora Repository 3.8.1 allows path traversal when extracting uploaded archives ("Zip Slip"). A remote, authenticated attacker can upload a specially crafted archive that will extract an arbitrary JSP file to a location that can be executed by an unauthenticated GET request. Fedora Repository 3.8.1 was released on 2015-06-11 and is no longer maintained. Migrate to a currently supported version (6.5.1 as of 2025-01-23).

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/fcrepo-exts/migration-utils Product
https://github.com/fcrepo/fcrepo/releases Release Notes
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-021-01.json Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:fedorarepository:fcrepo:*:*:*:*:*:*:*:*
History

19 Sep 2025, 18:30

Type Values Removed Values Added
References () https://github.com/fcrepo-exts/migration-utils - () https://github.com/fcrepo-exts/migration-utils - Product
References () https://github.com/fcrepo/fcrepo/releases - () https://github.com/fcrepo/fcrepo/releases - Release Notes
References () https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-021-01.json - () https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-021-01.json - Product
First Time Fedorarepository fcrepo
Fedorarepository
CPE cpe:2.3:a:fedorarepository:fcrepo:*:*:*:*:*:*:*:*

03 Feb 2025, 20:15

Type Values Removed Values Added
Summary
  • (es) Fedora Repository 3.8.1 permite Path Traversal al extraer archivos cargados ("Zip Slip"). Un atacante remoto autenticado puede cargar un archivo manipulado especial que extraerá un archivo JSP arbitrario a una ubicación que se puede ejecutar mediante una solicitud GET no autenticada. El repositorio de Fedora 3.8.1 se lanzó el 11 de junio de 2015 y ya no se mantiene. Migre a una versión compatible actualmente (6.5.1 a partir del 23 de enero de 2025).

23 Jan 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-23 21:15

Updated : 2025-09-19 18:30

NVD link : CVE-2025-23011

Mitre link : CVE-2025-23011

CVE.ORG link : CVE-2025-23011

JSON object : View

Products Affected

fedorarepository

  • fcrepo
CWE
CWE-23

Relative Path Traversal