~ / search / GHSA-4jhw-c53w-w5r7

GHSA-4jhw-c53w-w5r7

PipeCD Vulnerable to Privilege Escalation

Source: GitHub Advisory Database (reviewed) High CVE-2024-53351

Packages

EcosystemPackageAffectedFixed in
Go github.com/pipe-cd/pipecd <= 0.49.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.

References

External links from the advisory. They lead to third-party sites.