CVE Intelligence

Vulnerabilidades do Go Github.com/karmada-io/karmada

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Go Github.com/karmada-io/karmada: 1 registro(s), com versões afetadas e correções.

CVE-2024-33396 Alta · 8.4 CWE-284 02/05/2024
karmada vulnerable to arbitrary code execution via a crafted command
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. NOTE: Then maintainer states that the behavior is intended design and notes that the researcher advisory does not provide evidence of arbitrary code execution.