Lucene search
GoogleOSV:GO-2024-2999HistoryAug 06, 2024 - 10:03 p.m.
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker
2024-08-0622:03:16
Google
osv.dev
4
workspace
overwrite
plugin
entrypoint
executable
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
Woodpecker’s custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker
Related
osv
osv
cve
cve
CVE-2024-41121
2024-07-19 20:15:08
veracode
veracode
Code Injection
2024-07-25 17:58:30
nvd
nvd
CVE-2024-41121
2024-07-19 20:15:08
github
github
cvelist
cvelist
vulnrichment
vulnrichment
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
Related for OSV:GO-2024-2999