PT-2023-15473 · Kraken · Kraken

Yhy0O · Publicado 2023-01-20 · Atualizado 2023-05-17 · CVE-2022-47747

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions kraken versions 0.1.4 and earlier

Description The issue is related to an arbitrary file read vulnerability. It affects the component testfs.

Recommendations For kraken versions 0.1.4 and earlier, consider restricting access to the testfs component until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2022-47747

GHSA-HJ4G-4W36-X8HP

GO-2023-1505

Produtos afetados

Kraken

Referências · 11

• 🔥 https://github.com/uber/kraken/issues/333 · Exploit
• https://github.com/uber/kraken · Nota
• https://ubuntu.com/security/CVE-2022-47747 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-hj4g-4w36-x8hp · Aviso do Fabricante
• https://github.com/advisories/GHSA-hj4g-4w36-x8hp · Nota
• https://osv.dev/vulnerability/GO-2023-1505 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-47747 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-47747 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2022-47747 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-47747 · Aviso do Fabricante
• https://t.me/cibsecurity/56775 · Publicação no Telegram