High severity8.8NVD Advisory· Published Aug 25, 2020· Updated Jun 17, 2026
CVE-2020-24614
CVE-2020-24614
Description
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-in privileges on the repository.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:fossil-scm:fossil:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fossil-scm:fossil:*:*:*:*:*:*:*:*range: <2.10.2
- (no CPE)range: <2.10.2, <2.11.2, <2.12.1
cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- Fossil/Fossildescription
- osv-coords5 versionspkg:rpm/opensuse/fossil&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/fossil&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/fossil&distro=openSUSE%20Tumbleweedpkg:rpm/suse/fossil&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/fossil&distro=SUSE%20Package%20Hub%2015%20SP2
< 2.12.1-bp152.2.3.1+ 4 more
- (no CPE)range: < 2.12.1-bp152.2.3.1
- (no CPE)range: < 2.12.1-bp152.2.3.1
- (no CPE)range: < 2.16-1.2
- (no CPE)range: < 2.12.1-bp152.2.3.1
- (no CPE)range: < 2.12.1-bp152.2.3.1
Patches
Vulnerability mechanics
References
8- lists.opensuse.org/opensuse-security-announce/2020-09/msg00065.htmlnvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2020/08/25/1nvdMailing ListThird Party Advisory
- fossil-scm.org/forum/info/a05ae3ce7760daf6nvdVendor Advisory
- fossil-scm.org/fossil/vdiffnvdThird Party Advisory
- security.gentoo.org/glsa/202011-04nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2020/08/20/1nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARYF4YMYXCANXUDS3B3CA4JGUZNUJOJA/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVZK4K7SFBQRCGCHS76HW2LTSEH2KSUM/nvd
News mentions
0No linked articles in our index yet.