Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•1 views

CVE-2023-23939: Incorrect Permission Assignment for Critical Resource

Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action because it is world writable. This...

7CVSS5.6AI score0.00362EPSS
SaveExploits0References2
Rows per page
Query Builder