PT-2021-22946
CVE-2021-40720
·
تاريخ النشر
2021-10-15
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Ops CLI versions 2.0.4 and earlier
Description
The issue is related to Deserialization of Untrusted Data, allowing arbitrary code execution when the
checkout repo function is called on a maliciously crafted file. This enables an attacker to execute arbitrary code on the victim machine.Recommendations
For Ops CLI versions 2.0.4 and earlier, consider disabling the
checkout repo function until a patch is available to prevent arbitrary code execution. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾