17 matches found
PYSEC-2026-1945 OpenStack Storlets arbitrary code execution vulnerability
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28717
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28716
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28716
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28716
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28716
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
PT-2024-22536 · Openstack · Openstack Storlets
Name of the Vulnerable Software and Affected Versions: OpenStack Storlets yoga-eom affected versions not specified Description: An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component. Recommendations: At the moment, there is no...
CVE-2024-28716
CVE-2024-28716 affects OpenStack Storlets yoga-eom and enables remote code execution via gateway.py. The CVSS v3.1 base score is 7.5 (HIGH); attack vector NETWORK, complexity LOW, privileges NONE, no user interaction. Several connected sources (NVD, Red Hat, CVE catalogs, PT Security) confirm the...
Time-of-check Time-of-use (TOCTOU) Attack
OpenStack Storlets is vulnerable to Time-of-check Time-of-use TOCTOU Attack. The vulnerability is caused due to a lack of strict permission checks and restriction, leading to improper permission settings on file creation. This allows an attacker to gain unauthorized access to or modify sensitive...
GHSA-RFM2-F94J-QHJP OpenStack Storlets arbitrary code execution vulnerability
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
OpenStack Storlets arbitrary code execution vulnerability
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28717
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28717
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
CVE-2024-28717
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...
OpenStack Storlets 安全漏洞
OpenStack Storlets is an Openstack Swift extension to OpenStack open source. A security vulnerability exists in OpenStack Storlets. A remote attacker can exploit this vulnerability to execute arbitrary code via the gateway.py component...
PT-2024-22537
Name of the Vulnerable Software and Affected Versions OpenStack Storlets version yoga-eom Description The issue allows a remote attacker to execute arbitrary code via the gateway.py component. Recommendations For OpenStack Storlets version yoga-eom, at the moment, there is no information about a...
CVE-2024-28717
CVE-2024-28717 affects OpenStack Storlets (yoga-eom) with a remote code execution risk through the gateway.py component. The connected documents consistently describe arbitrary code execution via gateway.py, but do not provide concrete vendor/version details beyond OpenStack Storlets yoga-eom, no...