Linaro Limited Linaro Automated Validation Architecture (LAVA) 2022.11

CPE Details

Linaro Limited Linaro Automated Validation Architecture (LAVA) 2022.11
linaro
lava
2022.11
2022-11-22
13h38 +00:00
2022-11-22
16h45 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:linaro:lava:2022.11:*:*:*:*:*:*:*

Informations

Vendor

linaro

Product

lava

Version

2022.11

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-45132 2022-11-17 23h00 +00:00 In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configuration files in lava-server loads input as a Jinja2 template in a way that can be used to trigger remote code execution in the LAVA server.
9.8
Critical