atlas-tj-actions-poc

CVE-2025-54416: Dimostrazione di iniezione di comandi in tj-actions/branch-names Questo repository dimostra CVE-2025-54416 , una vulnerabilità critica di iniezione di comandi in tj-actions/branch-names che interessa oltre 5.000 repository pubblici. Vulnerabilità L'azione GitHub...

Exploit for CVE-2025-54416

CVE-2025-54416: tj-actions/branch-names Command Injection PoC...

CVE-2025-54416

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...

PT-2025-30953

Name of the Vulnerable Software and Affected Versions: tj-actions/branch-names versions 8.2.1 and below Description: A critical command injection vulnerability exists in the tj-actions/branch-names GitHub Action workflow. This flaw stems from inconsistent input sanitization and unescaped output,...

CVE-2023-49291 Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The tj-actions/branch-names GitHub Actions improperly references the github.event.pullrequest.head.ref and github.headref context variables within a GitHub Actions run step. The head ref variab...