Medium · 4.9 CVE-2024-28717 EUVD-2024-1297GHSA-rfm2-f94j-qhjpPYSEC-2026-1945

OpenStack Storlets arbitrary code execution vulnerability

Published Apr 22, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

Ecosystem	Package	Affected	Fixed	Record
PyPI	storlets	< 13.0.0.0rc1	13.0.0.0rc1	GHSA-rfm2-f94j-qhjp