Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-3312 1 Pagure 1 Pagure 2026-03-18 7.7 High
A flaw was found in Pagure's rendering engine for reStructuredText (RST) files. An authenticated user can exploit an unrestricted `.. include::` directive within RST files to read arbitrary internal files from the server hosting Pagure. This information disclosure vulnerability allows unauthorized access to sensitive data on the server.