gh-workflow-auditor

GitHub Workflow Auditor Herramientas de auditoría de flujos de trabajo para identificar problemas de seguridad en flujos de trabajo de GitHub Uso usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow position...

PT-2021-3213

Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow Auditor service of the LOCMAN:PLM system. This could allow an attacker to execute arbitrary code...