CVE-2024-53351 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.
Critical CVSS: 9.8

CVE-2024-53351

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.
Vendor
Linuxfoundation
Product
Pipecd
CWE
CWE-276
Yayın Tarihi
2025-03-21 17:15:38
Güncelleme
2025-04-01 20:21:11
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-276 Pipecd CRITICAL Linuxfoundation 2025

Referanslar

https://gist.github.com/HouqiyuA/948a808b8bd48b17b37a4d5e0b6fb005 https://github.com/pipe-cd/pipecd https://pipecd.dev/