Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-9301

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
netflix

Description

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container via authenticated HTTP POST requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Netflix Spinnaker

  • All versions prior to version 1.23.4, 1.22.4 or 1.21.5affected

References