Em resumo
- CVE-2023-0778 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta github.com/containers/podman/v4.
- Chance de exploração nos próximos 30 dias (EPSS): 0.54%, maior que 45.5% das vulnerabilidades.
- Correção: atualize para 4.4.2 ou posterior.
Description
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
NVD description
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
Mais vulnerabilidades de github.com/containers/podman/v4
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free