Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/13 9:56 p.m.30 views

CVE-2026-73841 OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.1.6 and 1.2.3, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/handlers/wirelogs.go authorize component:exec and wirelogs:view using the caller-supplied project query parameter instead...

8.8CVSS5.7AI score
SaveExploits0References11
Rows per page
Query Builder