Executive brief
Karmada Tar Slips in CRDs archive extraction in github.com/karmada-io/karmada
Affected products
- Go github.com/karmada-io/karmada
Junglewise Threat Intelligence
CVE-2024-56514: GO-2025-3363 - Karmada Tar Slips in CRDs archive extraction in github.com/karmada-io/karmada
CVE-2024-56514 · Severity: medium · CVSS 4 · Published 2025-01-07
Technologies: github.com/karmada-io/karmada (Go). Vendors: Go.
Related threats
- GO-2025-3364 - Karmada PULL Mode Cluster Privilege Escalation in github.com/karmada-io/karmada
- GO-2024-2441 - The DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada
- GO-2024-2817 - karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada
- The DES/3DES cipher was used as part of the TLS protocol by installation tools