Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Atlassian Jira 安全漏洞
Vulnerability Description
Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。 Atlassian Jira gajira-create 2.0.2之前版本存在安全漏洞，该漏洞源于execute函数允许远程攻击者通过创建一个特别制作的GitHub问题注释，在GitHub运行器上下文中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A