← All credits

Red Hat would like to thank Matthias Gerstner (SUSE Security Team) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root