CVE-2024-28717

2024-04-2200:00:00

mitre

github.com

openstack

storlets

remote execution

gateway component

code execution

AI Score

7.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:openstack:storlets:*:*:*:*:*:*:*:*"
    ],
    "vendor": "openstack",
    "product": "storlets",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ],
    "defaultStatus": "unknown"
  }
]