{
  "schema_version": "1.4.0",
  "id": "GHSA-vq29-4w8w-gp83",
  "modified": "2022-05-13T01:49:20Z",
  "published": "2022-05-13T01:49:20Z",
  "aliases": [
    "CVE-2018-11757"
  ],
  "details": "In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may allow an attacker to replace the user function inside the container if the user code is vulnerable to code exploitation.",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11757"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/incubator-openwhisk-runtime-docker/commit/891896f25c39bc336ef6dda53f80f466ac4ca3c8"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/0b6d8a677f1c063ed32eb3638ef4d1a47dfba8907de4b222ddd24b05@%3Cdev.openwhisk.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://www.puresec.io/hubfs/Apache%20OpenWhisk%20PureSec%20Security%20Advisory.pdf"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/104913"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-07-23T17:29:00Z"
  }
}