Authentication Bypass

lava is vulnerable to authentication bypass. The vulnerability exists in lavaserver/lavatable.py due to improper input sanitization which allows an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

CVE-2022-42902: Improper Control of Generation of Code

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

CVE-2022-42902

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...