atlassian/gajira-comment

atlassian/gajira-comment

Releases9
Frequency5 months 2 weeks
Last Release
Stars35

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL7.5 HIGH

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment.