SecBoard
Zurück zur CVE-Übersicht

CVE-2024-3727

HIGH(8.3)

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Risk Signal Score21/100 — NIEDRIG
  • CVSS 8.3 — Hoch

EPSS-Score

1%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

8.3

Technische Schwere

Beschreibung

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Referenzen