CVE-2024-2243
Csmock: command injection vulnerability in csmock-plugin-snyk
Résumé
Csmock: command injection vulnerability in csmock-plugin-snyk
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers.
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org