CVSS 3.1 · Low EPSS 0,26%
Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada blacklanternsecurity bbot. Skor CVSS 3.1 3.1 (Low) menurut blacklanternsecurity.com.
BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder. The write is bounded to two directory levels above the output location and its target is determined by the operator's configuration, not the attacker.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| blacklanternsecurity | bbot | Versi 1.1.7 hingga 2.8.6 |
| blacklanternsecurity | bbot | Versi 3.0.0.0 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.647 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.649 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.652 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.654 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.659 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.669 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.671 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.673 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.691 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.765 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.767 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.773 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.782 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.786 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.793 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.795 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.798 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.819 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.821 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.829 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.836 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.849 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.851 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.858 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.870 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.876 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.884 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.897 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.903 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.907 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.909 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.981 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.986 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1056 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1062 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1064 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1068 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1070 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1079 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1137 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1139 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1141 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1153 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1173 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1184 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1190 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1254 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1271 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1274 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1304 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1313 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1317 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1333 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1343 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1345 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1349 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1386 rc |
| blacklanternsecurity | bbot | Versi 3.0.0.1388 rc |