إرسال #838569: antlr ANTLR4 4.13.2 Command Injectionالمعلومات

عنوانantlr ANTLR4 4.13.2 Command Injection
الوصفWhen ANTLR4 generates Go code (-Dlanguage=Go), the GoTarget class executes gofmt using ProcessBuilder("gofmt", ...) without specifying an absolute path. The binary is resolved via the PATH environment variable. An attacker who can prepend a directory to PATH (via compromised build scripts, CI environment injection, or .envrc files) can place a malicious executable named gofmt that will be executed with the privileges of the build process. This was confirmed to achieve code execution with a crafted PATH.
المصدر⚠️ https://github.com/wooyun123/wooyun/issues/6
المستخدم
 jiazhou (UID 89028)
ارسال27/05/2026 10:52 AM (1 شهر منذ)
الاعتدال27/06/2026 08:28 PM (1 month later)
الحالةتمت الموافقة
إدخال VulDB374496 [antlr ANTLR4 حتى 4.13.2 gofmt GoTarget.java GoTarget تجاوز الصلاحيات]
النقاط20

Do you need the next level of professionalism?

Upgrade your account now!