Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/08/13 9:56 p.m.39 views

CVE-2026-73841 OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.1.6 and 1.2.3, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/handlers/wirelogs.go authorize component:exec and wirelogs:view using the caller-supplied project query parameter instead...

8.8CVSS0.00549EPSS
SaveExploits0References9
Rows per page
Query Builder