Lucene search

K
cvelistMitreCVELIST:CVE-2023-43741
HistoryDec 22, 2023 - 12:00 a.m.

CVE-2023-43741

2023-12-2200:00:00
mitre
www.cve.org
vulnerability
buildkite
elastic ci
aws
symbolic link
pipeline_path

0.0004 Low

EPSS

Percentile

9.2%

A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to bypass a symbolic link check for the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script.

0.0004 Low

EPSS

Percentile

9.2%

Related for CVELIST:CVE-2023-43741