Beveiligingsadvies

CVE-2020-9301

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-11 02:10:32

Laatst bijgewerkt 2024-08-04 10:26:16

Toegewezen door netflix

CVSS-score geen score

Status PUBLISHED

Beschrijving

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container via authenticated HTTP POST requests.

← Alle CVE's bekijken Bekijk op cve.org ↗