9.0Kritisch
Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333
Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22; Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.23; Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC /…
1.3%EPSS