PT-2023-28701 · Buildkit · Buildkite Elastic Ci For Aws

Name of the Vulnerable Software and Affected Versions: Buildkite Elastic CI for AWS versions prior to 6.7.1 Buildkite Elastic CI for AWS versions prior to 5.22.5 Description: A symbolic link following issue allows the buildkite-agent user to change ownership of arbitrary directories via the...

CVE-2023-43116

Buildkite Elastic CI for AWS is affected by a symbolic link following vulnerability in versions prior to 6.7.1 and 5.22.5. The issue lets the buildkite-agent user change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script. Affecte...