VULNERABILITY INTELLIGENCE
CVE-2024-38826
EPSS probability0.40%
CISA KEVNot currently listed
Published2024-11-11
Last modified2026-06-17
Description
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgrade capi release version to 1.194.0 or greater * Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-400