How severe is CVE-2023-51699?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6 out of 10.

What type of vulnerability is CVE-2023-51699?

This is classified as CWE-78, which is a common weakness in software security.

CVE-2023-51699 - MEDIUM Severity | CVSS 6

Vulnerability Description

Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has the authority to create or update the K8s CRD Dataset/JuicefsRuntime, to execute arbitrary OS commands within the juicefs related containers. This could lead to unauthorized access, modification or deletion of data. Users who're using versions < 0.9.3 with JuicefsRuntime should upgrade to v0.9.3.

Related Vulnerabilities

CVE-2024-20461

MEDIUM

CVSS:6.0(Medium)

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root us...

CWE-782024

CVE-2025-27079

MEDIUM

CVSS:6.0(Medium)

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successfu...

CWE-782025

CVE-2022-0764

MEDIUM

CVSS:6.1(Medium)

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

CWE-782022

CVE-2022-22454

MEDIUM

CVSS:5.9(Medium)

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CWE-782022

CVE-2023-34980

MEDIUM

CVSS:5.9(Medium)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands v...

CWE-782023

CVE-2024-20275

MEDIUM

CVSS:6.1(Medium)

A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to...

CWE-782024