CVE-2022-46179

LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUBACTIONS environment variable to anything other than null or true and skip authentication checks. This issue is patched in the latest...

CVE-2022-46179

creationtimestamp| type| source ---|---|--- 2022-12-28 12:12:10+00:00| seen| https://t.me/cibsecurity/55462 2025-04-14 16:53:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11648...

CVE-2022-46179 LiuOS vulnerable to Authorization Bypass through User-Controlled Key

LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUBACTIONS environment variable to anything other than null or true and skip authentication checks. This issue is patched in the latest...

CVE-2022-46179

Vulnerability summary (CVE-2022-46179): LiuOS (versions 0.1.0 and prior) contains an authorization bypass where an attacker can set the GITHUB_ACTIONS environment variable to any value other than null or true, allowing login checks to be skipped. Root cause: improper handling of GITHUB_ACTIONS en...

CVE-2022-46179 LiuOS vulnerable to Authorization Bypass through User-Controlled Key

LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUBACTIONS environment variable to anything other than null or true and skip authentication checks. This issue is patched in the latest...