Unrestricted file upload leading to privilege escalation in act

CVE-2023-22726

What is CVE-2023-22726?

The act project, which facilitates the local running of GitHub Actions, has a vulnerability in its artifact server that fails to sanitize path inputs. This oversight allows attackers to execute path traversal attacks, thereby downloading and overwriting arbitrary files on the host system. Specifically, the vulnerable /upload and /artifact endpoints permit user-controlled input that directly influences file path resolution, ultimately endangering the integrity of the system. To mitigate this vulnerability, users are strongly advised to upgrade to version 0.2.40 or later. Those unable to upgrade should implement path validation measures or sanitize user inputs to prevent unauthorized access.

References