What is GHSA-rfm2-f94j-qhjp?

GHSA-rfm2-f94j-qhjp is a security advisory published by GitHub Security Advisories with High severity. OpenStack Storlets arbitrary code execution vulnerability

Which CVE IDs does GHSA-rfm2-f94j-qhjp cover?

GHSA-rfm2-f94j-qhjp covers the following CVE IDs: CVE-2024-28717. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rfm2-f94j-qhjp?

GHSA-rfm2-f94j-qhjp has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

Which products are affected by GHSA-rfm2-f94j-qhjp?

GHSA-rfm2-f94j-qhjp affects 1 product, including: pip/storlets:\u003c 13.0.0.0rc1.

GHSA-rfm2-f94j-qhjpHighCVSS 7.8

OpenStack Storlets arbitrary code execution vulnerability

Vendor

GitHub Security Advisories

Published

April 22, 2024

Last Modified

July 3, 2024

🔗 CVE IDs covered (1)

CVE-2024-28717 →

📋 Description

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

🎯 Affected products1

pip/storlets:< 13.0.0.0rc1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-28717
https://bugs.launchpad.net/storlets/+bug/2047723
https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f
https://github.com/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70e
https://github.com/advisories/GHSA-rfm2-f94j-qhjp