Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Swift-on-File 任意代码执行漏洞
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。Swift-on-File（又名Swiftonfile）是其中的一个用于扩展Swift集群并从不同的存储后端迁移数据的服务。 OpenStack Swift-on-File中存在安全漏洞，该漏洞源于程序加载元数据时没有限制使用pickle Python模块。远程攻击者可借助特制的扩展属性（xattrs）利用该漏洞执行任
CVSS Information
N/A
Vulnerability Type
N/A