CVE-2023-42798: hollowaykeanho automataci

csirt@kutim:~/threat-intel/cve/CVE-2023-42798

CVSS 9.1 · Critical EPSS 0,36%

Kerentanan Improper Input Validation pada hollowaykeanho automataci. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a workaround, make sure the `PROJECT_PATH_RELEASE` (e.g. `releases/`) directory is manually and actually `git cloned` properly, making it a different git repostiory from the root git repository.

Rincian

Terbit di NVD: 22 September 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-20: Improper Input Validation
EPSS (30 hari): 0,36% peluang dieksploitasi; lebih tinggi dari 27,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
hollowaykeanho	automataci	Semua versi sebelum 1.5.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/ChewKeanHo/AutomataCI/security/advisories/GHSA-6q23-vhhg-8h89 advisory vendor
https://github.com/ChewKeanHo/AutomataCI/issues/93 issue tracking · patch

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.