Threats tagged 'ghsa-cjj3-f3rf-jf7w'

CVE-2024-2243 is a command injection vulnerability in the csmock tool used by the OSH service. A regular user with a valid Kerberos ticket can exploit this flaw to disclose a confidential Snyk authentication token and execute arbitrary commands on OSH workers. This vulnerability allows unauthorized code execution and potential denial of service. It affects community products shipping csmock but not Red Hat's official software. No patch information is provided in the advisory.