CVE-2023-51699
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-51699
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-51699.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-51699
- Aliases
- Related
- Published
- 2024-03-15T19:15:06Z
- Modified
- 2025-04-09T16:51:57.712460Z
- Severity
-
- 6.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has the authority to create or update the K8s CRD Dataset/JuicefsRuntime, to execute arbitrary OS commands within the juicefs related containers. This could lead to unauthorized access, modification or deletion of data. Users who're using versions < 0.9.3 with JuicefsRuntime should upgrade to v0.9.3.
- References