EUVD-2007-2520

Malware in sbrugna...

Privilege Escalation

github.com/cri-o/cri-o is vulnerable to Privilege Escalation. The vulnerability exists because the setupContainerUser function in containercreate.go does not properly validate the homedir parameter, allowing an attacker to maliciously craft an environment variable with newlines to add entries to ...