← All advisories

Medium severity4.9GHSA Advisory· Published Apr 22, 2024· Updated Apr 15, 2026

CVE-2024-28717

CVE-2024-28717

Description

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
storletsPyPI	< 13.0.0.0rc1	13.0.0.0rc1

Affected products

2

OpenStack/StorletsGHSA
Range: < 13.0.0.0rc1
ghsa-coords
pkg:pypi/storlets
Range: < 13.0.0.0rc1

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-rfm2-f94j-qhjpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-28717ghsaADVISORY
bugs.launchpad.net/storlets/+bug/2047723nvdWEB
gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532fnvdWEB
github.com/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70eghsaWEB

News mentions

0

No linked articles in our index yet.