Remote Code Execution Vulnerability in OpenStack Storlets
CVE-2024-28717

4.9MEDIUM

Key Information:

Vendor: OpenStack
Vendor: CVE Published:; 22 April 2024

🔔 Create OpenStack Vulnerability Alert

What is CVE-2024-28717?

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

References

https://bugs.launchpad.net/storlets/+bug/2047723

https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e5...

CVSS V3.1

Score:

4.9

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 22, 2024
Vulnerability Reserved
Mar 8, 2024

CVE-2024-28717 Data

.