admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-22263.md
0xMarcio 8d17e0c8f8 Update CVE sources 2024-08-24 17:55
2024-08-24 17:55:21 +00:00

1013 B
Raw Blame History

CVE-2024-22263

Description

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromises the server.

POC

Reference

No PoCs from references.

Github