AZL-39592 CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12

🗓️ 12 Jan 2024 11:15:13Reported by GoogleType

Path traversal in go-git before 5.11 allows tampering and code execution with ChrootOS PlainClone; BoundOS and in memory FS unaffected.

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go and opm affect IBM Robotic Process Automation.	16 Jul 202413:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	2 Aug 202515:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	28 Feb 202417:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Concert Software is vulnerable to multiple issues	22 Aug 202417:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by Vulnerabilities in Go-git with Instana Agent container image	15 Mar 202413:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to a Path Traversal in Grafana (CVE-2023-49568, CVE-2023-49569)	5 Aug 202420:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	29 Apr 202502:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Docker Registry, OpenSSH and go-git	28 Mar 202410:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multible go-git vulnerabilities.	9 Sep 202418:48	–	ibm
Tenable Nessus	Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2024-526)	20 Feb 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-49569

21 Apr 2026 04:28Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.04027