Lucene search

GitHub Advisory DatabaseGHSA-297X-2QF3-JRJ3

HistoryJan 21, 2024 - 6:30 p.m.

Unsafe yaml deserialization in llama-hub

2024-01-2118:30:34

CWE-502

GitHub Advisory Database

github.com

llama-hub

openapi

chatgpt

plugin loaders

yaml deserialization

arbitrary code

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.

Affected configurations

Vulners

Node

quotes_llama_projectquotes_llamaRange<0.0.67wordpress

VendorProductVersionCPE
quotes_llama_projectquotes_llama*cpe:2.3:a:quotes_llama_project:quotes_llama:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
quotes_llama_project	quotes_llama	*	cpe:2.3:a:quotes_llama_project:quotes_llama::::::wordpress::*

References

github.com/advisories/GHSA-297x-2qf3-jrj3

github.com/run-llama/llama-hub/blob/v0.0.67/CHANGELOG.md

github.com/run-llama/llama-hub/commit/c01416e737c7747a213a79881b8308c41d043515

github.com/run-llama/llama-hub/releases/tag/v0.0.67

nvd.nist.gov/vuln/detail/CVE-2024-23730

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

Related for GHSA-297X-2QF3-JRJ3