CVE-2024-8260
OPA SMB Force-Authentication
概要
OPA SMB Force-Authentication
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web tenable.com