sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of arbitrary file. This would have potential to overwrite `/root/.ssh/authorized_keys`. Within sbt's main code, `IO.unzip` is used in `pullRemoteCache` task and `Resolvers.remote`; however many projects use `IO.unzip(...)` directly to implement custom tasks. This vulnerability has been patched in version 1.9.7.
CVSS Details
- CVSS 3.1 Base Score: 3.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade sbt-bootstrapUpgrade xmvn-parentUpgrade maven-javadocUpgrade xmvn-apiUpgrade xmvn-connector-javadocUpgrade sbtUpgrade maven-resolver-transport-httpUpgrade xmvn-minimalUpgrade maven-resolverUpgrade maven-resolver-spiUpgrade maven-resolver-named-locksUpgrade maven-resolver-apiUpgrade maven-resolver-utilUpgrade mavenUpgrade maven-resolver-implUpgrade xmvn-connectorUpgrade xmvn-mojo-javadocUpgrade xmvn-resolveUpgrade xmvn-substUpgrade maven-resolver-transport-wagonUpgrade maven-resolver-test-utilUpgrade xmvnUpgrade xmvn-tools-javadocUpgrade xmvn-mojoUpgrade xmvn-installUpgrade xmvn-coreUpgrade maven-resolver-javadocUpgrade maven-resolver-connector-basicUpgrade maven-libUpgrade maven-resolver-transport-fileUpgrade maven-resolver-transport-classpath | Nov 23, 2023 | Oct 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub