Threats tagged 'ghsa-4mpf-j2w4-fh8h'

Pexip Infinity versions before 38.2, as well as versions 39.0, 39.1, and 40.0, contain a vulnerability due to improper input validation in an internal service. This flaw allows an attacker with local access and the ability to run arbitrary code on a node to escalate privileges to root. Exploitation requires prior code execution or administrative OS access. The vulnerability has a high severity score of 7.8.