Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2023-0092
Analyzed
More InfoOfficial Page
Source-security@ubuntu.com
View Known Exploited Vulnerability (KEV) details
Published At-31 Jan, 2025 | 02:15
Updated At-26 Aug, 2025 | 17:48

An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.14.9MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CPE Matches
Canonical Ltd.
canonical
>>juju>>Versions from 2.9.22(inclusive) to 2.9.38(exclusive)
cpe:2.3:a:canonical:juju:*:*:*:*:*:go:*:*
Canonical Ltd.
canonical
>>juju>>Versions from 3.0.0(inclusive) to 3.0.3(exclusive)
cpe:2.3:a:canonical:juju:*:*:*:*:*:go:*:*
Weaknesses
CWE IDTypeSource
CWE-22Secondary134c704f-9b21-4f2e-91b3-4a467353bcc0
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/advisories/GHSA-x5rv-w9pm-8qp8security@ubuntu.com
Vendor Advisory
https://github.com/juju/juju/commit/ef803e2a13692d355b784b7da8b4b1f01dab1556security@ubuntu.com
Patch
Change History
0Changes found
Details not found