7 matches found
EUVD-2022-2518
Malicious code in bioql PyPI...
Withdrawn Advisory: Pulp Improper Path Parsing
Withdrawn Advisory This advisory has been withdrawn because the package pulpcore deals with pulp 3 only. This advisory concerns pulp 2, which is not in a supported ecosystem. Original Description pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a...
GHSA-574P-6FW4-4HW8 Withdrawn Advisory: Pulp Improper Path Parsing
Withdrawn Advisory This advisory has been withdrawn because the package pulpcore deals with pulp 3 only. This advisory concerns pulp 2, which is not in a supported ecosystem. Original Description pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a...
Moderate: Red Hat Security Advisory: Satellite 6.5 Release
Red Hat Satellite 6.5 for RHEL 7 is now available containing security fixes, bug fixes, and enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Design/Logic Flaw
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...
CVE-2018-10917
CVE-2018-10917 concerns Pulp (version 2.16.x and possibly older) with an improper path parsing vulnerability. A malicious user or malicious ISO feed repository could write to locations accessible to the apache user, potentially overwriting published content in other ISO repositories. Public recor...
CVE-2018-10917
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...