CVE-2024-28717

An issue in OpenStack Storlets (specifically the yoga-eom version) allows a remote attacker to execute arbitrary code via the gateway.py component. Additionally, the software is vulnerable to a Time-of-check Time-of-use (TOCTOU) attack caused by a lack of strict permission checks and restrictions...