Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Celery权限许可和访问控制漏洞
Vulnerability Description
Celery 2.1版本和2.2.8之前的2.2版本，2.3.4之前的2.3版本以及2.4.4 之前的2.4版本中存在漏洞。该漏洞源于在处理--uid和--gid参数时将有效但非真正的id转换成celerybeat, celeryd_detach, celeryd-multi和celeryev，本地用户可以借助特制代码的向量提升权限。
CVSS Information
N/A
Vulnerability Type
N/A