Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/08/15 12:30 a.m.24 views

Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking

In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability,...

5.8CVSS5.3AI score0.00334EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/08/14 11:20 p.m.49 views

CVE-2024-7625 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking

In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability,...

5.8CVSS0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/14 11:20 p.m.17 views

CVE-2024-7625 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking

In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability,...

5.8CVSS5.4AI score0.00334EPSS
SaveExploits0References1
Rows per page
Query Builder