PT-2023-22825 · Kiwi Tcms · Kiwitcms/Kiwi +1

Name of the Vulnerable Software and Affected Versions: kiwitcms/Kiwi versions 12.2 and prior kiwitcms/enterprise versions 12.2 and prior Description: The changelog.yml workflow in Kiwi TCMS is vulnerable to command injection attacks due to the use of an untrusted github.head ref field. The...