Aller au contenu
Non notée

CVE-2021-3762 A directory traversal vulnerability was found in the ClairCore engine of Clair

Description

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.

Produits et versions touchés

Produit Versions touchées Corrigé en
quay/claircore Versions non publiées
Suivre cette CVE