PT-2024-22910 · Unknown · Ros2 Humble Hawksbill
Published
2024-04-11
·
Updated
2024-05-27
·
CVE-2024-29455
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
ROS2 Humble Hawksbill versions 2
Description
An arbitrary file upload issue has been found, allowing attackers to execute arbitrary code, cause a denial of service, and obtain sensitive information via a crafted payload to the file upload mechanism. This includes the server's functionality for handling file uploads and associated validation processes.
Recommendations
For ROS2 Humble Hawksbill version 2, consider restricting access to the file upload mechanism as a temporary workaround until a patch is available. Avoid using the file upload functionality in the ROS2 system until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ros2 Humble Hawksbill