Path traversal in GitHub CLI - CVE-2024-54132
Published: December 19, 2024
Vulnerability identifier: #VU101844
CSH Severity: Medium
CVSS v4: 7.4 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-54132
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to overwrite arbitrary files on the system.
The vulnerability exists due to input validation error when processing directory traversal sequences within the "gh run download" command when downloading GitHub Actions workflow artifact. A remote attacker can trick the victim into downloading a specially crafted GitHub Actions workflow artifact and overwrite arbitrary files on the system, leading to potential remote code execution.
Affected software
GitHub CLI
Ubuntu
Fedora
gh (Ubuntu package)
gh
Ubuntu
Fedora
gh (Ubuntu package)
gh
How to mitigate CVE-2024-54132
Install update from vendor's website.
GitHub CLI - update to 2.63.1
gh (Ubuntu package) - update to 2.45.0-1ubuntu0.3+esm2
gh - update to 2.63.2-1.fc42
gh (Ubuntu package) - update to 2.45.0-1ubuntu0.3+esm2
gh - update to 2.63.2-1.fc42