CVE Intelligence

Go Github.com/karmada-io/karmada vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Go Github.com/karmada-io/karmada: 1 record(s), with affected versions and fixes.

CVE-2024-33396 High · 8.4 CWE-284 May 2, 2024
karmada vulnerable to arbitrary code execution via a crafted command
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. NOTE: Then maintainer states that the behavior is intended design and notes that the researcher advisory does not provide evidence of arbitrary code execution.