Lucene search

K
osvGoogleOSV:GO-2024-2817
HistoryJun 05, 2024 - 3:10 p.m.

karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada

2024-06-0515:10:42
Google
osv.dev
karmada
vulnerability
code execution

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%