CVE-2024-1485

Summary

CVE-2024-1485 is a newly disclosed vulnerability affecting the registry-support's decompression function. If exploited, this issue can be triggered by an unauthenticated remote attacker who tricks a user into parsing a specially crafted devfile. The devfile contains the `parent` or `plugin` keywords, which can lead to the download of a malicious archive. Subsequently, the cleanup process is manipulated to overwrite or delete files outside of the archive, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.