CVE-2024-39897

creationtimestamp| type| source ---|---|--- 2024-07-09 21:55:31+00:00| seen| https://t.me/cvedetector/432 2026-01-24 22:43:12+00:00| seen| https://gist.github.com/alon710/54c1ca0ee276425cc5a62776a9963d6b...

CVE-2024-39897 Cache driver GetBlob() allows read access to any blob without access control check

zot is an OCI image registry. Prior to 2.1.0, the cache driver GetBlob allows read access to any blob without access control check. If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by...

CVE-2024-39897 Cache driver GetBlob() allows read access to any blob without access control check

zot is an OCI image registry. Prior to 2.1.0, the cache driver GetBlob allows read access to any blob without access control check. If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by...