CVE-2024-3154 — Cri-o: arbitrary command injection via pod annotation
A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an ar…
Published: 2024-04-26 · CVSS: 7.2 · CVSS 3.1
A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7