Paper/Archive/CVE-2024-1485

CVE-2024-1485

Red Hat OpenShift Developer Tools and Services — Registry-support: decompress can delete files outside scope via relative paths

EPSS 0.9%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (NVD)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 61.0.610 × 2012.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.

Affected

ProductAffectedFixed inSource

registry-support1.16.2–CNA

OpenShift Developer Tools and Servicessee advisory–CNA

Red Hat OpenShift Container Platform 4see advisory–CNA

Scores by source

NVD9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H

redhat (CNA)8.0CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refaccess.redhat.com/security/cve/CVE-2024-1485 refbugzilla.redhat.com/show_bug.cgi?id=2264106 refgithub.com/advisories/GHSA-84xv-jfrm-h4gm refgithub.com/devfile/registry-support/commit/0e44b9ca6d03fac4fc3f77d37656d56dc5defe0d refgithub.com/devfile/registry-support/pull/197