← Database

CVE-2023-0778

MEDIUM CVSS: 6.8 Published: 2023-03-27 Modified: 2026-06-17

Description

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.

Affected Platforms

Podman Project PodmanRedhat Enterprise Linux

Weakness Type

CWE-367, CWE-367

References