exploitDog

GHSA-j52h-5vxc-vjgw

Опубликовано: 05 мая 2022

Источник: github

Github: Не прошло ревью

Описание

The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.

The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2013-2060
https://bugzilla.redhat.com/show_bug.cgi?id=960363
https://exchange.xforce.ibmcloud.com/vulnerabilities/84075
http://www.openwall.com/lists/oss-security/2013/05/07/1
http://www.securityfocus.com/bid/59687

EPSS

Процентиль: 92%

0.0554

Низкий

CVE ID

Связанные уязвимости

CVE-2013-2060

redhat

больше 13 лет назад

The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.

CVE-2013-2060

CVSS3: 9.8

nvd

больше 6 лет назад

The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.

EPSS

Процентиль: 92%

0.0554

Низкий

CVE ID