Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-0778
6.8
MEDIUMCVSS v3
Published
March 27, 2023
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
podman-container-tools/podman
GitHubPodman: A tool for managing OCI containers and pods.
GitHubPodman: A tool for managing OCI containers and pods.all versionsNVD
