CyberRota Analysis
AI-GeneratedSemaphore versions prior to 2.18.20 are vulnerable to an OS command injection flaw in the handling of the git_url parameter, allowing authenticated users with Manager or Owner roles to execute arbitrary shell commands on the server. This vulnerability poses a significant risk of remote code execution, potentially compromising the entire Semaphore server environment. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerability in the repository git_url handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craft a malicious git_url value using git's --upload-pack= option to inject and execute arbitrary shell commands when the server processes repository operations using the default cmd_git client.