Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:source-to-image:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductSource To Image (bf3be359-8456-5e3d-8d1a-f925d8db0190)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/openshift/source-to-image purl2cpe 2026-06-01 10:12:53.717586
pkg:rpm/fedora/source-to-image purl2cpe 2026-06-01 10:12:53.717590

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1103 vulnerable 2026-06-08 05:11:16.908838 Details available
MEDIUM (6.1)
Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command.
Published: 2018-06-12T15:00:00.000Z
Updated: 2024-08-05T03:51:48.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.