CVE-2024-38368 Trunk's 'Claim your pod' could be used to obtain un-used pods

🗓️ 01 Jul 2024 21:48:05Reported by GitHub_MType

CVE-2024-38368 Trunk's 'Claim your pod' vulnerabilit

Reporter	Title	Published	Views	Family All 5
OSV	CVE-2024-38368	1 Jul 202421:15	–	osv
CVE	CVE-2024-38368	1 Jul 202421:15	–	cve
Vulnrichment	CVE-2024-38368 Trunk's 'Claim your pod' could be used to obtain un-used pods	1 Jul 202421:05	–	vulnrichment
NVD	CVE-2024-38368	1 Jul 202421:15	–	nvd
The Hacker News	Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks	1 Jul 202416:12	–	thn

[
  {
    "vendor": "CocoaPods",
    "product": "CocoaPods",
    "versions": [
      {
        "version": "< 71be5440906b6bdfbc0bcc7f8a9fec33367ea0f4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
blog	www.blog.cocoapods.org/Claim-Your-Pods
evasec	www.evasec.webflow.io/blog/eva-discovered-supply-chain-vulnerabities-in-cocoapods
github	www.github.com/CocoaPods/trunk.cocoapods.org/commit/71be5440906b6bdfbc0bcc7f8a9fec33367ea0f4
github	www.github.com/CocoaPods/CocoaPods/security/advisories/GHSA-j483-qm5c-7hqx
blog	www.blog.cocoapods.org/CocoaPods-Trunk-RCEs-2023

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo