| ID | CVE-2022-42902 | ||||||
| Sažetak | In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | ||||||
| Zadnje važnije ažuriranje | 15-05-2025 - 17:15 | ||||||
| Objavljeno | 13-10-2022 - 03:15 |
