{"id":"CVE-2017-8048","details":"In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.","modified":"2026-04-10T04:01:07.851893Z","published":"2017-10-04T01:29:03.653Z","references":[{"type":"ADVISORY","url":"https://www.cloudfoundry.org/cve-2017-8048/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/cf-release","events":[{"introduced":"0"},{"last_affected":"befcb8a72297f8f132ee6cb4653d7d20cbd57041"},{"introduced":"0"},{"last_affected":"b31611aaecacf6c42a8ed226ac7d42a0974fccdc"},{"introduced":"0"},{"last_affected":"eea95fc6faa2529748cf69180f80be72fa93187d"},{"introduced":"0"},{"last_affected":"b1c0ef2bf502e35d242524ce21a0012cfd5b9eb2"},{"introduced":"0"},{"last_affected":"32b488da923ccffb9fb0aa8f46f0073ec9b957c7"},{"introduced":"0"},{"last_affected":"0d3dff9de8a0b4bcacf025bd50dd9dcbfe9675d3"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"268"},{"introduced":"0"},{"last_affected":"269"},{"introduced":"0"},{"last_affected":"270"},{"introduced":"0"},{"last_affected":"271"},{"introduced":"0"},{"last_affected":"272"},{"introduced":"0"},{"last_affected":"273"}]}}],"versions":["-","list","log","rc145.0","scotty_09012012","v100","v102","v103","v104","v105","v109","v119","v132","v133","v134","v135","v136","v137","v140","v143","v156","v157","v161","v170","v183","v205","v245","v249","v253","v260","v262","v268","v269","v270","v271","v272","v273","v99","works-for-us"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8048.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.33.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.34.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.35.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.36.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.37.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.38.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.39.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.40.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.41.0"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}