Description
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.
Published: 2018-08-15
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-2518 pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.
Github GHSA Github GHSA GHSA-574p-6fw4-4hw8 Withdrawn Advisory: Pulp Improper Path Parsing
History

No history.

Subscriptions

Pulpproject Pulp
Redhat Rhui Satellite Satellite Capsule
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-05T07:54:35.610Z

Reserved: 2018-05-09T00:00:00.000Z

Link: CVE-2018-10917

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-08-15T17:29:00.407

Modified: 2024-11-21T03:42:17.943

Link: CVE-2018-10917

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-08-14T21:50:00Z

Links: CVE-2018-10917 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses