GitHub Advisoryadvisory · Packagist

GHSA-cv5c-2qv5-w2m2 Passbolt Api Remote code execution

HIGH Published 2024-05-20 Modified 2024-05-20 Official page ↗
Ecosystem
Packagist
Packages
passbolt/passbolt_api
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Reviewed
2024-05-20

Affected packages

• Packagist passbolt/passbolt_api: < 2.7.0 → fixed in 2.7.0

Description

Passbolt provides a way for system administrators to generate a PGP key for the server during installation. The wizard requests a username, an e-mail address and an optional comment. No escaping or verification is done by Passbolt, effectively allowing a user to inject bash code. The impact is very high, but the probability is very low given that this vulnerability can only be exploited during Passbolt’s installation stage.

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References