GO-2024-2692
- Source
- https://pkg.go.dev/vuln/GO-2024-2692
- Import Source
- https://vuln.go.dev/ID/GO-2024-2692.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GO-2024-2692
- Aliases
-
- CVE-2024-3250
- GHSA-4685-2x5r-65pj
- Published
- 2024-06-04T15:19:21Z
- Modified
- 2024-06-04T16:58:35.638897Z
- Summary
- Pebble service manager's file pull API allows access by any user in github.com/canonical/pebble
- Details
-
Pebble service manager's file pull API allows access by any user in github.com/canonical/pebble
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2024-2692" }- References
-
- https://github.com/canonical/pebble/security/advisories/GHSA-4685-2x5r-65pj
- https://nvd.nist.gov/vuln/detail/CVE-2024-3250
- https://www.cve.org/CVERecord?id=CVE-2024-3250
- https://github.com/canonical/pebble/commit/4ca343d3889533143477e21c63867f2f3c3b5645
- https://github.com/canonical/pebble/commit/a5f6f062a11ea156697b854264385ff7e1985fd8
- https://github.com/canonical/pebble/commit/b8abd1ff0090f3e0749e81eb1fc3ea16ba95f514
- https://github.com/canonical/pebble/commit/cd326225b9b0be067da7d8858e2c912078cbbbd5
- https://github.com/canonical/pebble/pull/406
Affected packages
Go / github.com/canonical/pebble
Package
- Name
- github.com/canonical/pebble
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/canonical/pebble