GitHub Advisoryadvisory · PyPI
GHSA-rfm2-f94j-qhjp OpenStack Storlets arbitrary code execution vulnerability
HIGH
Official page ↗
- Aliases
- CVE-2024-28717
- Ecosystem
- PyPI
- Packages
- storlets
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-367, CWE-400
- Reviewed
- 2024-04-22
Affected packages
• PyPI storlets: < 13.0.0.0rc1 → fixed in 13.0.0.0rc1
Description
An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.
Related
Alias · CVE (1)
- CVE-2024-28717 An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-28717 advisory
- https://github.com/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70e web
- https://bugs.launchpad.net/storlets/+bug/2047723 web
- https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f web
- https://github.com/openstack/storlets package