CVE-2024-1329
Nomad Vulnerable to Arbitrary Write Through Symlink Attack
概要
Nomad Vulnerable to Arbitrary Write Through Symlink Attack
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.hashicorp.com