PT-2023-29855 · Sbt+1 · Sbt+1
Xuwei-K
·
Publicado
2023-10-23
·
Atualizado
2024-11-15
·
CVE-2023-46122
CVSS v3.1
3.9
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
sbt versions prior to 1.9.7
Description
The issue allows writing of arbitrary files given a specially crafted zip or JAR file, utilizing
IO.unzip. This could potentially overwrite /root/.ssh/authorized keys. Within sbt's main code, IO.unzip is used in the pullRemoteCache task and Resolvers.remote. Many projects also use IO.unzip(...) directly for custom tasks.Recommendations
For versions prior to 1.9.7, update to version 1.9.7 to resolve the issue. As a temporary workaround, consider using an alternative library to unzip files until the update can be applied. Restrict access to the
IO.unzip function to minimize the risk of exploitation. Avoid using IO.unzip directly in custom tasks until the issue is resolved.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Sbt