CVE-2023-51664

Summary

CVE-2023-51664 is a vulnerability affecting the `tj-actions/changed-files` GitHub action before version 41.0.0. This workflow, which retrieves all files and directories, was found to be susceptible to command injection in the filenames. An attacker could exploit this vulnerability to execute arbitrary code, potentially leading to the leakage of secrets. This issue poses a significant risk, as it could result in arbitrary command execution in the GitHub Runner. Users are strongly recommended to upgrade to version 41.0.0 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.