Catégories
CVE-2023-42798

AutomataCI Release Job Can Revert Repo to First Commit

Résumé

AutomataCI Release Job Can Revert Repo to First Commit

Description d'origine

La description telle que publiée par la source (souvent en anglais).

AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a workaround, make sure the PROJECT_PATH_RELEASE (e.g. releases/) directory is manually and actually git cloned properly, making it a different git repostiory from the root git repository.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Références

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus