Junglewise Threat Intelligence

CVE-2024-39897: GO-2024-2979 - Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

CVE-2024-39897 · Severity: low · CVSS 3.1 · Published 2024-07-10

Technologies: zotregistry.dev/zot (Go). Vendors: Go.

Executive brief

Cache driver GetBlob() allows read access to any blob without access control check in zotregistry.dev/zot

Affected products

  • Go zotregistry.dev/zot
  • Go zotregistry.io/zot

Related threats