PT-2024-18975 · Otclient · Otclient

Sim4N6 · Published 2024-01-02 · Updated 2024-01-08 · CVE-2024-21623

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OTCLient versions prior to commit db560de0b56476c87a2f967466407939196dd254

Description The issue concerns an expression injection vulnerability in the /mehah/otclient "Analysis - SonarCloud" workflow, allowing an attacker to run commands remotely on the runner, leak secrets, and alter the repository using this workflow.

Recommendations For versions prior to commit db560de0b56476c87a2f967466407939196dd254, update to a version that includes the fix commit db560de0b56476c87a2f967466407939196dd254 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable "Analysis - SonarCloud" workflow until the update is applied.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2024-21623

GHSA-Q6GR-WC79-V589

Affected Products

Otclient

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/21xxx/CVE-2024-21623.json · Exploit
• 🔥 https://github.com/mehah/otclient/security/advisories/GHSA-q6gr-wc79-v589 · Exploit
• 🔥 https://securitylab.github.com/research/github-actions-preventing-pwn-requests · Exploit
• 🔥 https://securitylab.github.com/research/github-actions-untrusted-input · Exploit
• https://github.com/mehah/otclient/commit/db560de0b56476c87a2f967466407939196dd254 · Patch
• https://osv.dev/vulnerability/CVE-2024-21623 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21623 · Security Note
• https://github.com/mehah/otclient/blob/72744edc3b9913b920e0fd12e929604f682fda75/.github/workflows/analysis-sonarcloud.yml#L91-L104 · Note
• https://twitter.com/CVEnew/status/1742284328019665251 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1742331630725771581 · Twitter Post
• https://t.me/cibsecurity/74203 · Telegram Post