CyberRota Analysis
AI-GeneratedThe `github_workflows` module in GitHub is vulnerable to directory traversal due to an insufficient path-containment check, allowing a crafted `CODE_REPOSITORY` URL to write downloaded artifacts outside the designated output directory. While the write operation is limited to two directory levels above the configured output location, the impact could lead to unintended file exposure or overwriting. Organizations utilizing GitHub workflows should prioritize addressing this vulnerability to mitigate potential risks associated with misconfigured output paths.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder. The write is bounded to two directory levels above the output location and its target is determined by the operator's configuration, not the attacker.