~ / search / GHSA-rfm2-f94j-qhjp

GHSA-rfm2-f94j-qhjp

OpenStack Storlets arbitrary code execution vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-28717

Packages

EcosystemPackageAffectedFixed in
PyPI storlets < 13.0.0.0rc1 13.0.0.0rc1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

References

External links from the advisory. They lead to third-party sites.