CVE-2017-8033

HIGH 7.8CVE-2017-8033 · Published 25/07/2017 · updated 17/06/2026

In short

CVE-2017-8033 is a HIGH (CVSS 7.8) vulnerability affecting capi-release (cloudfoundry), cf-release (cloudfoundry).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.4% of all vulnerabilities.
Fix: update to 1.35.0, 268 or later.

Package	Affected versions	Patched versions
capi-release cloudfoundry	`< 1.35.0`	`1.35.0`
cf-release cloudfoundry	`< 268`	`268`

Description

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushing a specially crafted application that can write arbitrary files to the Cloud Controller VM.

References

cloudfoundry.org/cve-2017-8033 · Vendor Advisory

More vulnerabilities in capi-release

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

capi-release

cloudfoundry

< 1.35.0

1.35.0

cf-release

cloudfoundry

< 268

268

Description

More vulnerabilities in capi-release

See all →