CVE-2024-5154

Published June 12th, 2024

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

cri-o/cri-o

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

GitHub

5.62K