Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmv6-pcxx-vfgj

Опубликовано: 11 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.3

Описание

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller.

The Cloud Foundry project recommends upgrading the following releases:

  • Upgrade capi release version to 1.194.0 or greater
  • Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller.

The Cloud Foundry project recommends upgrading the following releases:

  • Upgrade capi release version to 1.194.0 or greater
  • Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release

EPSS

Процентиль: 32%
0.00123
Низкий

5.3 Medium

CVSS4

Дефекты

CWE-400

Связанные уязвимости

nvd
около 1 года назад

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgrade capi release version to 1.194.0 or greater * Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release

EPSS

Процентиль: 32%
0.00123
Низкий

5.3 Medium

CVSS4

Дефекты

CWE-400