RHSA-2025:8540HighCVSS 7.5
Red Hat Security Advisory: Red Hat Developer Hub 1.5.2 release.
🔗 CVE IDs covered (1)
📋 Description
CVE-2024-12905 — tar-fs: link following and path traversal via maliciously crafted tar file
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2025:8540
- externalhttps://access.redhat.com/security/cve/CVE-2024-12905
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://catalog.redhat.com/search?gs&searchType=containers&q=rhdh
- externalhttps://developers.redhat.com/rhdh/overview
- externalhttps://docs.redhat.com/en/documentation/red_hat_developer_hub
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8540.json