CVE-2023-27581

Katalog CVE

CVSS 8.8 · High EPSS 1,6%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada github-slug-action project github-slug-action. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be triggered by any user on GitHub on any workflow using the action on pull requests. They just need to create a pull request with a branch name, which can contain the attack payload. This can be used to execute code on the GitHub runners and to exfiltrate any secrets one uses in the CI pipeline. A patched action is available in version 4.4.1. No workaround is available.

Rincian

Terbit di NVD

13 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 74,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rlespinasse/github-slug-action/security/advisories/GHSA-6q4m-7476-932w advisory vendor
• https://github.com/rlespinasse/github-slug-action/commit/102b1a064a9b145e56556e22b18b19c624538d94 patch
• https://securitylab.github.com/research/github-actions-untrusted-input/ exploit · advisory pihak ketiga
• https://github.com/rlespinasse/github-slug-action/releases/tag/v4.4.1 release notes