Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-2E2364AACAB9BFDE40EE9177107CDF53

HistorySep 03, 2024 - 12:00 a.m.

@actions/artifact has an Arbitrary File Write via artifact extraction

2024-09-0300:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

arbitrary file write

artifact extraction

path traversal

vulnerability

software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

Versions of actions/artifact before 2.1.7 are vulnerable to arbitrary file write when using downloadArtifactInternal, downloadArtifactPublic, or streamExtractExternal for extracting a specifically crafted artifact that contains path traversal filenames.

Affected configurations

Vulners

Node

npmartifactRange<2.1.7

VendorProductVersionCPE
npmartifact*cpe:2.3:a:npm:artifact:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
npm	artifact	*	cpe:2.3:a:npm:artifact::::::::

References

github.com/actions/toolkit

github.com/actions/toolkit/commit/29885a805ef3e95a9862dcaa8431c30981960017

github.com/actions/toolkit/pull/1724

github.com/actions/toolkit/security/advisories/GHSA-6q32-hq47-5qq3

github.com/advisories/GHSA-6q32-hq47-5qq3

nvd.nist.gov/vuln/detail/CVE-2024-42471

snyk.io/research/zip-slip-vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

Related for GITLAB-2E2364AACAB9BFDE40EE9177107CDF53