Lucene search
+L
GithubActions Toolkit

1 matches found

CVE
CVE
added 2024/09/02 4:13 p.m.103 views

CVE-2024-42471

CVE-2024-42471 affects the GitHub Toolkit component actions/artifact (2.x) prior to 2.1.2 , where extracting artifacts with path traversal filenames via downloadArtifactInternal , downloadArtifactPublic , or streamExtractExternal can cause an arbitrary file write. Affected advisories also referen...

7.5CVSS7.4AI score0.03037EPSS
Save