CVE-2018-12564

Mô tả

Tham khảo

• git.linaro.org/lava/lava.git/commit · Patch
• lists.debian.org/debian-lts-announce/2018/06/msg00011.html · Third Party Advisory
• debian.org/security/2018/dsa-4234 · Third Party Advisory

Lỗ hổng khác của lava

• CVE-2022-45132NGHIÊM TRỌNG 9.8In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 tem…
• CVE-2022-44641TRUNG BÌNH 6.5In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that caus…
• CVE-2022-42902CAO 8.8In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to impro…
• CVE-2018-12565CAO 8.8An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data…
• CVE-2018-12563TRUNG BÌNH 6.5An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to down…