PT-2023-20317 · Versionn · Versionn

Published 2023-02-20 · Updated 2023-03-01 · CVE-2023-25805

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versionn versions prior to 1.1.0

Description The issue is a command injection vulnerability. It affects all versions of versionn prior to 1.1.0. This vulnerability allows for command injection, which can be exploited by attackers.

Recommendations For versions prior to 1.1.0, please upgrade to versionn@1.1.0 to resolve the issue. As a temporary workaround, consider restricting the use of versionn until the patch is applied.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-25805

GHSA-FJ78-2VC5-F6CM

Affected Products

Versionn

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25805.json · Exploit
• https://github.com/commenthol/versionn/commit/2ca128823efe962b37f2698f0eb530c2b124842d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-25805 · Security Note
• https://osv.dev/vulnerability/GHSA-fj78-2vc5-f6cm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-25805 · Vendor Advisory
• https://github.com/commenthol/versionn/security/advisories/GHSA-fj78-2vc5-f6cm · Note
• https://github.com/commenthol/versionn · Note
• https://t.me/cvenotify/44679 · Telegram Post
• https://t.me/cibsecurity/58528 · Telegram Post