GHSA-3qm5-22pm-wqg9: bird-lg-go: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an Unauthorized Actor in github.com/xddxdd/bird-lg-go
bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bashhistory. This issue has been patched in version 1.4.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
github.com/xddxdd/bird-lg-goto a version that resolves this vulnerability.Fixed in 1.4.7
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker can exploit it. No privileges or user interaction are required.
Which deployments are affected?
bird-lg-go versions prior to 1.4.7 are affected. The issue is in handling of an input path, which can permit arbitrary local file reads.
What information could be exposed?
An attacker may read sensitive local files, including examples such as /etc/shadow and /root/.bash_history. The impact is confidentiality loss; integrity and availability effects are not described.
What is the remediation?
Upgrade bird-lg-go to version 1.4.7, which patches the issue.