PT-2023-28701 · Buildkit · Buildkite Elastic Ci For Aws

Name of the Vulnerable Software and Affected Versions: Buildkite Elastic CI for AWS versions prior to 6.7.1 Buildkite Elastic CI for AWS versions prior to 5.22.5 Description: A symbolic link following issue allows the buildkite-agent user to change ownership of arbitrary directories via the...

Buildkite Elastic CI Stack for AWS Security Vulnerability

Buildkite Elastic CI Stack for AWS is an application from Buildkite that provides private, auto-scaling clusters of Buildkite Agents. A security vulnerability exists in Buildkite Elastic CI Stack for AWS versions prior to 6.7.1, prior to 5.22.5, which stems from a symbolic link that allows...

CVE-2023-43116

Buildkite Elastic CI for AWS is affected by a symbolic link following vulnerability in versions prior to 6.7.1 and 5.22.5. The issue lets the buildkite-agent user change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script. Affecte...

PT-2021-3364 · Opensuse · Opensuse Leap

Name of the Vulnerable Software and Affected Versions: python-HyperKitty versions prior to 1.3.4-5.1 openSUSE Leap 15.2 python-HyperKitty version 1.3.2-lp152.2.3.1 and prior versions Description: The issue is related to a UNIX Symbolic Link Symlink Following vulnerability in python-HyperKitty,...