Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-864h-cmr8-fpc7

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).

OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).

EPSS

Процентиль: 79%
0.01202
Низкий

Дефекты

CWE-94

Связанные уязвимости

redhat
больше 10 лет назад

OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).

nvd
около 10 лет назад

OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).

EPSS

Процентиль: 79%
0.01202
Низкий

Дефекты

CWE-94