{"id":"CVE-2017-8048","details":"In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.","modified":"2026-08-27T03:47:23.244243747Z","published":"2017-10-04T01:29:03.653Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:pivotal:capi-release:1.33.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.34.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.35.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.36.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.37.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.38.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.39.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.40.0:*:*:*:*:*:*:*","cpe:2.3:a:pivotal:capi-release:1.41.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.33.0"},{"last_affected":"1.33.0"},{"introduced":"1.34.0"},{"last_affected":"1.34.0"},{"introduced":"1.35.0"},{"last_affected":"1.35.0"},{"introduced":"1.36.0"},{"last_affected":"1.36.0"},{"introduced":"1.37.0"},{"last_affected":"1.37.0"},{"introduced":"1.38.0"},{"last_affected":"1.38.0"},{"introduced":"1.39.0"},{"last_affected":"1.39.0"},{"introduced":"1.40.0"},{"last_affected":"1.40.0"},{"introduced":"1.41.0"},{"last_affected":"1.41.0"}],"source":"CPE_STRING","vendor_product":"pivotal:capi-release"}]},"references":[{"type":"ADVISORY","url":"https://www.cloudfoundry.org/cve-2017-8048/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry-attic/cf-release","events":[{"introduced":"befcb8a72297f8f132ee6cb4653d7d20cbd57041"},{"last_affected":"0d3dff9de8a0b4bcacf025bd50dd9dcbfe9675d3"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:cloudfoundry:cf-release:268:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:269:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:270:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:271:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:272:*:*:*:*:*:*:*","cpe:2.3:a:cloudfoundry:cf-release:273:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"268"},{"last_affected":"268"},{"introduced":"269"},{"last_affected":"269"},{"introduced":"270"},{"last_affected":"270"},{"introduced":"271"},{"last_affected":"271"},{"introduced":"272"},{"last_affected":"272"},{"introduced":"273"},{"last_affected":"273"}]}}],"versions":["268","269","270","271","272","273"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8048.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}