| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/openshift/source-to-image | < 1.1.10-0.20180427153919-f5cbcbc5cc6f | 1.1.10-0.20180427153919-f5cbcbc5cc6f |
| source-to-image | < 1.1.10 | 1.1.10 |
Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command.
github.com/openshift/source-to-image/pkg/tar
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free