CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Kubernetes. Its EPSS score suggests a 17.5% probability of exploitation in the next 30 days.
CVE
CVE-2024-22263
Severity
HIGH
CVSS
8.8
EPSS
17.54%
Kubernetes
Original NVD Description
Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromises the server.