Lucene search
GoogleOSV:GO-2024-2576HistoryJun 05, 2024 - 3:10 p.m.
registry-support: decompress can delete files outside scope via relative paths in github.com/devfile/registry-support/registry-library
2024-06-0515:10:52
Google
osv.dev
1
registry-support
decompress
files
relative paths
github
devfile
registry-library
software
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:H
7.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
registry-support: decompress can delete files outside scope via relative paths in github.com/devfile/registry-support/registry-library
References
Related
prion
prion
Design/Logic Flaw
2024-02-14 00:15:00
cve
cve
CVE-2024-1485
2024-02-14 00:15:46
nvd
nvd
CVE-2024-1485
2024-02-14 00:15:46
osv
osv
CVE-2024-1485
2024-02-14 00:15:46
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-1485
2024-02-13 22:34:20
github
github
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:H
7.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Related for OSV:GO-2024-2576