SUSE SLES15: kubernetes1.23-apiserver / kubernetes1.23-client / etc (SUSE-SU-2024:1163-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1163-1 advisory. - CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. bsc1219964 Tenable has extracted the preceding descriptio...

CVE-2024-1163

creationtimestamp| type| source ---|---|--- 2024-02-13 16:22:16+00:00| seen| https://t.me/ctinow/183928 2025-05-09 18:26:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15809...

@etalab/cadastre (>=0.14.0-1, <=0.21.0), @fmidev/smartmet-alert-client (>=3.0.0-rc.1, <=3.8.8) +10 more potentially affected by CVE-2024-1163 via mapshaper (>=0.3.43, <=0.6.42)

mapshaper NPM version =0.3.43, =0.14.0-1, =3.0.0-rc.1, =0.1.9, =0.0.3, =2.1.0, =1.3.1, =0.0.1, =0.0.1, =0.1.0 - tile-maker 0.0.1 Source cves: CVE-2024-1163 Source advisory: OSV:GHSA-8M36-62RW-9MXW...

CVE-2024-1163 Path traversal vulnerability in mapshaper

The attacker may exploit a path traversal vulnerability leading to information disclosure...

CVE-2024-1163 Path traversal vulnerability in mapshaper

The attacker may exploit a path traversal vulnerability leading to information disclosure...

CVE-2024-1163

CVE-2024-1163 maps to a path traversal vulnerability in mapshaper (mbloch/mapshaper) prior to version 0.6.44. The root cause is unsanitized/unsafe handling of the request URL path, enabling an attacker to read arbitrary files on the system with the user’s privileges. Public sources in the connect...