The vulnerability of the uploadDir() function in the internal/server/storage/s3/local/multipart.go file of the container management system and the virtual machine manager software from Incus, which allows a attacker to execute arbitrary commands.

The vulnerability of the uploadDir function in the internal/server/storage/s3/local/multipart.go file of the container management system and the virtual machine manager Incus is related to improper external manipulation of the file name or path. Exploiting this vulnerability allows a remote...

Denial Of Service (DoS)

github.com/corazawaf/coraza is vulnerable to Denial Of Service DoS. The vulnerability exists in the Read function of multipart.go due to misuse of the log.Fatalf function, which allows an attacker to cause an application crash by providing maliciously crafted requests...