openshift github.com/openshift/builder vulnerabilities

Latest openshift github.com/openshift/builder CVEs

Newest publication first

1. CVE-2024-7387 OpenShift Builder has a path traversal, allows command injection in privileged BuildContainer

   Published 2024-09-18

   Medium·CVSS 6.4

   A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the "Docker" strategy, executable files inside the privileg...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.