CVE-2024-2243
Csmock: command injection vulnerability in csmock-plugin-snyk
Summary
Csmock: command injection vulnerability in csmock-plugin-snyk
Original description
The description as published by the source.
A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers.
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org