Vulnerabilities > CVE-2023-27581 - Unspecified vulnerability in Github-Slug-Action Project Github-Slug-Action

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

github-slug-action-project

NVD

Published: 2023-03-13

Updated: 2024-11-21

Summary

github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be triggered by any user on GitHub on any workflow using the action on pull requests. They just need to create a pull request with a branch name, which can contain the attack payload. This can be used to execute code on the GitHub runners and to exfiltrate any secrets one uses in the CI pipeline. A patched action is available in version 4.4.1. No workaround is available.

Vulnerable Configurations

Part	Description	Count
Application	Github-Slug-Action_Project Github Slug Action Project Github Slug Action 4.0.0 Github Slug Action Project Github Slug Action 4.0.1 Github Slug Action Project Github Slug Action 4.1.0 Github Slug Action Project Github Slug Action 4.2.0 Github Slug Action Project Github Slug Action 4.2.1 Github Slug Action Project Github Slug Action 4.2.2 Github Slug Action Project Github Slug Action 4.2.3 Github Slug Action Project Github Slug Action 4.2.4 Github Slug Action Project Github Slug Action 4.2.5 Github Slug Action Project Github Slug Action 4.3.0 Github Slug Action Project Github Slug Action 4.3.1 Github Slug Action Project Github Slug Action 4.3.2	12

Summary

Vulnerable Configurations

References