CVE-2024-53351

Impact

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://gist.github.com/HouqiyuA/948a808b8bd48b17b37a4d5e0b6fb005
• https://github.com/pipe-cd/pipecd
• https://pipecd.dev/
• https://github.com/advisories/GHSA-4jhw-c53w-w5r7
• https://nvd.nist.gov/vuln/detail/CVE-2024-53351
• https://pipecd.dev