CVE-2023-0092

Description

An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.

Reserved 2023-01-05 | Published 2025-01-31 | Updated 2025-02-07 | Assigner canonical

Product status

2.9.22 before 2.9.38
affected

3.0.0 before 3.0.3
affected

2.9.38 before 3.0.3
affected

References

github.com/advisories/GHSA-x5rv-w9pm-8qp8 issue-tracking

github.com/...ommit/ef803e2a13692d355b784b7da8b4b1f01dab1556 patch

cve.org (CVE-2023-0092)

nvd.nist.gov (CVE-2023-0092)

Download JSON