Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27676
HistoryOct 26, 2020 - 4:10 p.m.

Sandbox Restrictions Bypass

2020-10-2616:10:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vulnerability
github
hashicorp
nomad
sandbox restrictions
artifact destination
interpolation
allocation directory
software

EPSS

0.002

Percentile

55.1%

github.com/hashicorp/nomad is vulnerable to sandbox restrictions bypass. The vulnerability exists due to interpolation that can be used in the artifact destination field to write artifact payloads outside of the allocation directory.