sandstorm

Top products

The 4 most recently published vulnerabilities affecting sandstorm.

• CVE-2017-6201A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access co...8.1Feb 6, 2018
• CVE-2017-6198The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to cause a denial of service by launching a fork bomb in the sandbox, or by using ...6.5Feb 6, 2018
• CVE-2017-6199A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field.9.8Feb 6, 2018
• CVE-2017-6200Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backup function. The root cause is that the findFilesToZip function doesn't filter...6.5Feb 6, 2018