malicious-devfile-registry

악성 Devfile 레지스트리 이 프로젝트는 GitLab에서 CVE-2024-0402를 악용하는 데 사용할 수 있는 악성 Devfile 레지스트리를 포함합니다. 익스플로잇 경로 탐색 문제를 악용하는 archive.tar 파일을 노출하도록 nodejs:2.2.1 스택이 인덱싱되었습니다. registry-support library before v1.1.0 tar 위치 : malicious-devfile-registry/stacks/nodejs/2.2.1/archive.tar 이 파일은 evilarc.py를 사용하여 생성되었으며,...

registry-support Security Vulnerabilities

registry-support is a Devfile open source library . It provides support for the devfile registry. registry-support security vulnerability , the vulnerability stems from an unauthenticated remote attacker to trick the user to open a specially modified tar archive , resulting in the cleanup process...

Moderate: Red Hat Security Advisory: Red Hat CodeReady Workspaces 2.1.0 release

Red Hat CodeReady Workspaces 2.1.0 has been released. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...