Blt
Monthly
Remote code execution in OWASP BLT versions prior to 2.1.2 enables attackers to execute arbitrary code with repository write permissions via malicious GitHub pull requests. The vulnerability exploits a GitHub Actions workflow misconfiguration where pull_request_target triggers execute code directly from attacker-controlled forks without proper validation. EPSS data not available; no confirmed active exploitation (not in CISA KEV); publicly disclosed via GitHub Security Advisory GHSA-cgvj-qg2h-cqfh.
Remote code execution in OWASP BLT's CI/CD workflow enables unauthenticated attackers to compromise the repository. The vulnerable .github/workflows/regenerate-migrations.yml workflow runs with full write permissions, copies attacker-supplied files from a pull request, and executes Python code that loads a malicious models.py during Django migrations. An external contributor who opens a pull request can achieve arbitrary code execution and secret exfiltration when a maintainer applies the regenerate-migrations label; a fix is expected in version 2.1.1, with no active exploitation confirmed but a proof-of-concept available.
Remote code execution in OWASP BLT versions prior to 2.1.2 enables attackers to execute arbitrary code with repository write permissions via malicious GitHub pull requests. The vulnerability exploits a GitHub Actions workflow misconfiguration where pull_request_target triggers execute code directly from attacker-controlled forks without proper validation. EPSS data not available; no confirmed active exploitation (not in CISA KEV); publicly disclosed via GitHub Security Advisory GHSA-cgvj-qg2h-cqfh.
Remote code execution in OWASP BLT's CI/CD workflow enables unauthenticated attackers to compromise the repository. The vulnerable .github/workflows/regenerate-migrations.yml workflow runs with full write permissions, copies attacker-supplied files from a pull request, and executes Python code that loads a malicious models.py during Django migrations. An external contributor who opens a pull request can achieve arbitrary code execution and secret exfiltration when a maintainer applies the regenerate-migrations label; a fix is expected in version 2.1.1, with no active exploitation confirmed but a proof-of-concept available.