| 제목 | redocly redocly-cli 2.32.2 Code Injection |
|---|
| 설명 | Arbitrary code execution via Arazzo $faker runtime expressions in the respect command. @redocly/respect-core builds a JavaScript function with new Function from specification content, so a malicious Arazzo description executes arbitrary code in the process running respect. Because respect is documented for automated contract testing over supplied files, an attacker who only submits a file (for example via a pull request) achieves unattended code execution with the runner's privileges
POC: https://gist.github.com/thegr1ffyn/2e1afa23f4ea3a61b651139305339e2a
(Note: Please consider submission ID: 865700 (https://vuldb.com/submit/865700) cancelled. I mistakenly added the wrong advisory link. This is the right one to process) |
|---|
| 원천 | ⚠️ https://github.com/Redocly/redocly-cli/pull/2881 |
|---|
| 사용자 | thegr1ffyn (UID 98937) |
|---|
| 제출 | 2026. 06. 22. PM 09:58 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 08. PM 04:06 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 387185 [redocly redocly-cli 까지 2.32.2 Arazzo Faker Runtime Expression get-value-from-context.ts 권한 상승] |
|---|
| 포인트들 | 20 |
|---|