Approved changes feed: RSS · Atom

cpe:2.3:a:snyk:code_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSnyk (f4b7c237-a89e-5dc8-bbf8-1750a8b0ca1a)
ProductCode Agent (e5b86393-6004-536c-b2b4-f4dca1de28b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21571 vulnerable 2026-06-03 14:54:49.749190 Details available
HIGH (8.1)
Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have network access to the Code Agent within the deployment environment. External exploitation of this vulnerability is unlikely and depends on both misconfigurations of the cluster and/or chaining with another vulnerability. However, internal exploitation (with a cluster misconfiguration) could still be possible.
Published: 2024-12-06T13:21:11.671Z
Updated: 2024-12-06T17:54:30.794Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.