Listen to this Post
A path traversal vulnerability has been identified in the GitHub CLI where specific HTTP request URLs, particularly REST API calls, were constructed without properly escaping their variable path components. When an interpolated component contains URL path metacharacters without percent encoding, it breaks out of its intended segment and alters the effective request path. This allows an attacker who controls a value flowing into a request path to cause the CLI to send requests to unintended API endpoints. Consequently, the tool can read, target, or act upon resources outside the user’s original scope. Remediation involves upgrading to version 2.97.0, where request URLs are safely constructed to prevent variable components from escaping their intended segments.
DailyCVE Form:
Platform: GitHub CLI
Version: <2.97.0
Vulnerability : Path Traversal
Severity: Critical
date: 2024-XX-XX
Prediction: Patched
What Undercode Say:
The vulnerability arises from improper sanitization and lack of percent-encoding on variable path components during REST API URL construction. When user-controlled input or repository names contain path traversal sequences (such as ../), they prematurely terminate the expected URL path segment and force the HTTP client to traverse to arbitrary API endpoints.
Exploit: (Educational Purposes!)
Example demonstrating path traversal injection in an unescaped request path component gh api repos/owner/../../../v1/targeted-endpoint
Protection:
Upgrade GitHub CLI to version 2.97.0 or later.
Avoid interacting with untrusted repositories or processing inputs with unvalidated path characters.
Impact:
Allows malicious actors to manipulate API request routes, leading to unauthorized data exposure, reading of sensitive resources, or unintended administrative actions against different API endpoints.
🎯Let’s Practice Exploiting & Learn Patching For Free:
🎓 Live Courses & Certifications:
Join Undercode Academy for Verified Certifications
🚀 Request a Custom Project:
Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
