CVE-2018-1103

2018-06-1215:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

40.1%

JSON

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command.

CPENameOperatorVersion
source-to-imageeq1.1.1
source-to-imageeq1.1.0
source-to-imageeq0.2
source-to-imageeq1.1.2
source-to-imageeq1.1.9a
source-to-imageeq1.0.7
source-to-imageeq1.1.9
source-to-imageeq0.3
source-to-imageeq0.5.1
source-to-imageeq1.1.4

Name	Operator	Version
source-to-image	eq	1.1.1
source-to-image	eq	1.1.0
source-to-image	eq	0.2
source-to-image	eq	1.1.2
source-to-image	eq	1.1.9a
source-to-image	eq	1.0.7
source-to-image	eq	1.1.9
source-to-image	eq	0.3
source-to-image	eq	0.5.1
source-to-image	eq	1.1.4