Arbitrary File Write via artifact extraction in actions/artifact
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.3epss 3.2%
from disclosure to weapon234 days
Published on NVDSep 2
1st PoC+234d
exploitation probability
3.2%top 13% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `actions/artifact` on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArtifactPublic`, or `streamExtractExternal` for extracting a specifically crafted artifact that contains path traversal filenames. Users are advised to upgrade to version 2.1.2 or higher. There are no known workarounds for this issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Affected products
actions · toolkitpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/52276unverifiedgithubgithub.com/theMcSam/CVE-2024-42471-PoC★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.