Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5590
HistoryDec 19, 2017 - 8:55 a.m.

Remote Code Execution (RCE)

2017-12-1908:55:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.004 Low

EPSS

Percentile

73.6%

github.com/heketi/heketi is vulnerable to remote code execution (RCE) attacks. The library doesn’t properly validate unmarshalled structures in messages, allowing a malicious user to inject and execute arbitrary code.