CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly. | 5.5 |
Moyen |
||
OpenShift Origin: Improperly validated team names could allow stored XSS attacks | 6.1 |
Moyen |
||
cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a (1) .tar.gz, (2) .zip, (3) .tgz, or (4) .tar file extension in a cartridge manifest file. | 10 |