CVE-2024-41228

CVE-2024-41228 describes a symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 . The root cause is a symlink following flaw in the pouch cp operation, enabling attackers to escalate privileges and write arbitrary files. Multiple connected sources corrob...