Executive brief
karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada
Affected products
- Go github.com/karmada-io/karmada
Junglewise Threat Intelligence
CVE-2024-33396: GO-2024-2817 - karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada
CVE-2024-33396 · Severity: low · CVSS 3.1 · Published 2024-06-05
Technologies: github.com/karmada-io/karmada (Go). Vendors: Go.
Related threats
- GO-2025-3364 - Karmada PULL Mode Cluster Privilege Escalation in github.com/karmada-io/karmada
- GO-2025-3363 - Karmada Tar Slips in CRDs archive extraction in github.com/karmada-io/karmada
- GO-2024-2441 - The DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada
- The DES/3DES cipher was used as part of the TLS protocol by installation tools