CVE-2024-2243
Csmock: command injection vulnerability in csmock-plugin-snyk
概要
Csmock: command injection vulnerability in csmock-plugin-snyk
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers.
参照URL
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org