Red Hat / Red Hat Build of Podman Desktop · Red Hat / Red Hat Certification Program for Red Hat Enterprise Linux 9 · Red Hat / Red Hat Edge Manager 1 · +7
9.3 · CVSS 3.1Critical
Description
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.