Lucene search
GoogleOSV:GO-2024-2582HistoryJun 28, 2024 - 3:28 p.m.
Minder trusts client-provided mapping from repo name to upstream ID in github.com/stacklok/minder
2024-06-2815:28:53
Google
osv.dev
minder
client-provided
mapping
github
repo
software
4.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Minder trusts client-provided mapping from repo name to upstream ID in github.com/stacklok/minder
Related
veracode
veracode
Denial Of Service (DOS)
2024-02-28 06:41:03
cve
cve
CVE-2024-27093
2024-02-26 22:15:07
cvelist
cvelist
osv
osv
Minder trusts client-provided mapping from repo name to upstream ID
2024-02-26 22:15:45
CVE-2024-27093
2024-02-26 22:15:07
github
github
Minder trusts client-provided mapping from repo name to upstream ID
2024-02-26 22:15:45
nvd
nvd
CVE-2024-27093
2024-02-26 22:15:07
prion
prion
Denial of service
2024-02-26 22:15:00
4.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Related for OSV:GO-2024-2582