CVE-2018-12563
19.06.2018, 05:29
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml.Enginsight
| Vendor | Product | Version |
|---|---|---|
| linaro | lava | 𝑥 < 2018.5.post1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration