Lucene search
PRIOn knowledge basePRION:CVE-2024-1485HistoryFeb 14, 2024 - 12:15 a.m.
Design/Logic Flaw
2024-02-1400:15:00
PRIOn knowledge base
www.prio-n.com
6
flaw
registry-support
decompression
remote attacker
devfile
keywords
malicious archive
unauthorized
overwrite
delete
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.
Related
osv
osv
registry-support: decompress can delete files outside scope via relative paths in github.com/devfile/registry-support/registry-library
2024-06-05 15:10:52
CVE-2024-1485
2024-02-14 00:15:46
cve
cve
CVE-2024-1485
2024-02-14 00:15:46
nvd
nvd
CVE-2024-1485
2024-02-14 00:15:46
cvelist
cvelist
github
github
redhatcve
redhatcve
CVE-2024-1485
2024-02-13 22:34:20