Skip to content

OpenShift Builder has a path traversal, allows command injection in privileged BuildContainer

Critical severity GitHub Reviewed Published Sep 17, 2024 to the GitHub Advisory Database • Updated Sep 19, 2024

Package

gomod github.com/openshift/builder (Go)

Affected versions

<= 4.0.0

Patched versions

None

Description

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the "Docker" strategy, executable files inside the privileged build container can be overridden using the spec.source.secrets.secret.destinationDir attribute of the BuildConfig definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.

References

Published by the National Vulnerability Database Sep 17, 2024
Published to the GitHub Advisory Database Sep 17, 2024
Reviewed Sep 17, 2024
Last updated Sep 19, 2024

Severity

Critical

EPSS score

0.043%
(10th percentile)

Weaknesses

CVE ID

CVE-2024-7387

GHSA ID

GHSA-qqv8-ph7f-h3f7

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.