Lucene search
+L

1 matches found

OSV
OSV
added 2022/10/19 6:54 p.m.68 views

GHSA-F9QJ-7GH3-MHJ4 run-terraform allows for RCE via terraform plan

Impact What kind of vulnerability is it? Who is impacted? All users of the run-terraform reusable workflow from the kartverket/github-workflows repo are affected. A malicious actor could potentially send a PR with a malicious payload leading to execution of arbitrary JavaScript code in the contex...

8.8CVSS8.5AI score0.01251EPSS
SaveExploits0References5
Rows per page
Query Builder