Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4hf9-48vj-q77g

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8

Описание

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud.

This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud.

This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

EPSS

Процентиль: 25%
0.00081
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-502

Связанные уязвимости

nvd
около 1 месяца назад

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

CVSS3: 6.3
fstec
6 месяцев назад

Уязвимость обработчика файлов Terraform инструмента для статического анализа кода Checkov by Prisma Cloud, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 25%
0.00081
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-502