malicious-devfile-registry

恶意 Devfile Registry 该项目包含一个恶意 Devfile Registry，可用于利用 Gitlab 中的 CVE-2024-0402。 漏洞利用 索引了一个 nodejs:2.2.1 栈，以暴露 archive.tar 文件，该文件利用了 registry-support 库 v1.1.0 之前版本 中的路径遍历问题。 tar 文件位置 ：malicious-devfile-registry/stacks/nodejs/2.2.1/archive.tar 它是使用 evilarc.py 创建的，用于覆盖目标 Gitlab 服务器中的...

registry-support Security Vulnerabilities

registry-support is a Devfile open source library . It provides support for the devfile registry. registry-support security vulnerability , the vulnerability stems from an unauthenticated remote attacker to trick the user to open a specially modified tar archive , resulting in the cleanup process...

Moderate: Red Hat Security Advisory: Red Hat CodeReady Workspaces 2.1.0 release

Red Hat CodeReady Workspaces 2.1.0 has been released. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...