CVE-2024-5154

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

Score
CVSS 3.1 8.1 High
Status
Modified - secalert@redhat.com
Published
2024-06-12
Last modified
2026-08-21
Weaknesses
CWE-22

Affected products

References

 
 
© AVABIS GmbH privacypolicy about