GitHub Advisoryadvisory · Go
GHSA-4q63-mr2m-57hf kubevirt allows a local attacker to execute arbitrary code via a crafted command
MEDIUM
Official page ↗
- Aliases
- CVE-2024-33394
- Ecosystem
- Go
- Packages
- kubevirt.io/kubevirt
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-94
- Reviewed
- 2024-05-03
Affected packages
• Go kubevirt.io/kubevirt: <= 1.2.0 (no fix yet)
Description
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.
Related
Alias · CVE (1)
- CVE-2024-33394 An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token… vulnerability
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness