Beveiligingsadvies

CVE-2024-48964

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-23 18:24:42

Laatst bijgewerkt 2024-10-24 13:48:00

Toegewezen door snyk

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects.

← Alle CVE's bekijken Bekijk op cve.org ↗