Base de CVEs

PraisonAI é um sistema de equipes multiagente. Antes da 4.5.121, a função execute_command e a execução de shell em fluxos de trabalho ficam expostas a entradas controladas pelo usuário por meio de fluxos de agentes, definições YAML e chamadas de ferramentas geradas por LLM, permitindo que atacantes injetem comandos de shell arbitrários por meio de metacaracteres de shell. Esta vulnerabilidade está corrigida na 4.5.121.

dbt permite que analistas e engenheiros de dados transformem seus dados usando as mesmas práticas que engenheiros de software usam para construir aplicações. No workflow reutilizável dbt-labs/actions/blob/main/.github/workflows/open-issue-in-repo.yml, o job prep usa peter-evans/find-comment para procurar um comentário existente indicando que uma issue de documentação já foi aberta. A saída steps.issue_comment.outputs.comment-body é então interpolada diretamente em uma instrução if do bash. Como comment-body é um texto controlado por atacante e é inserido na sintaxe do shell sem escape, um corpo de comentário malicioso pode sair da string entre aspas e injetar comandos de shell arbitrários. Esta vulnerabilidade é corrigida com o commit bbed8d28354e9c644c5a7df13946a3a0451f9ab9.

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers can exploit this vulnerability to write malicious PHP files into the web root and achieve remote code execution with the privileges of the web server process. This vulnerability has been fixed in version NACFirmware_4.0.0.7_20210716.180815_topsec_0_basic.bin. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-06-01 (UTC).

Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then directly passed into an expect command, which is then subsequently passed into a bash -c command, without any form of sanitization or validation. An unauthenticated attacker can achieve root-level RCE inside the worker container with a single HTTP request, enabling full read/write access to all user-uploaded images, analysis results, and plaintext steganography passwords stored on disk. Because the container shares a Docker network with PostgreSQL and Redis (no authentication on either), the attacker can pivot to dump the entire database or manipulate the job queue to poison results for other users. If Docker socket mounting or host volume mounts are present, this could escalate to full host compromise. This would also include defacement of the website itself. This vulnerability is fixed in 3.2.1.