The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download. This vulnerability stems from a GitHub Actions workflow artifact named .. when downloaded using gh run download. The artifact name and --dir flag are used to determine the artifact’s download path. When the artifact is named .., the resulting files within the artifact are extracted exactly 1 directory higher than the specified --dir flag value. This vulnerability is fixed in 2.63.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The GitHub CLI is GitHub's official command line tool. A security vulnerability has been identified in     GitHub CLI that could create or overwrite files in unintended directories when users download a malicious     GitHub Actions workflow artifact through gh run download. This vulnerability stems from a GitHub Actions     workflow artifact named .. when downloaded using gh run download. The artifact name and --dir flag are     used to determine the artifact's download path. When the artifact is named .., the resulting files within     the artifact are extracted exactly 1 directory higher than the specified --dir flag value. This     vulnerability is fixed in 2.63.1. (CVE-2024-54132)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of gh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-54132 advisory.

  - The GitHub CLI is GitHub's official command line tool. A security vulnerability has been identified in     GitHub CLI that could create or overwrite files in unintended directories when users download a malicious     GitHub Actions workflow artifact through gh run download. This vulnerability stems from a GitHub Actions     workflow artifact named .. when downloaded using gh run download. The artifact name and --dir flag are     used to determine the artifact's download path. When the artifact is named .., the resulting files within     the artifact are extracted exactly 1 directory higher than the specified --dir flag value. This     vulnerability is fixed in 2.63.1. (CVE-2024-54132)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-54132 advisory.

  - The GitHub CLI is GitHub's official command line tool. A security vulnerability has been identified in     GitHub CLI that could create or overwrite files in unintended directories when users download a malicious     GitHub Actions workflow artifact through gh run download. This vulnerability stems from a GitHub Actions     workflow artifact named .. when downloaded using gh run download. The artifact name and --dir flag are     used to determine the artifact's download path. When the artifact is named .., the resulting files within     the artifact are extracted exactly 1 directory higher than the specified --dir flag value. This     vulnerability is fixed in 2.63.1. (CVE-2024-54132)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
230572	Linux Distros Unpatched Vulnerability : CVE-2024-54132	Nessus	Misc.	medium
216093	Azure Linux 3.0 Security Update: gh (CVE-2024-54132)	Nessus	Azure Linux Local Security Checks	medium
213307	CBL Mariner 2.0 Security Update: gh (CVE-2024-54132)	Nessus	MarinerOS Local Security Checks	medium

Detections

Analytics

CVE-2024-54132

medium

Tenable Plugins

medium

medium

medium