Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2024-2243

Csmock: command injection vulnerability in csmock-plugin-snyk

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

csmock

Default version status: unaffected

  • 3.5.3unaffected
  • 3.5.2affected
  • 3.5.1affected

References