Skip to content
OpenAdvisories
High · 8.2 CVE-2023-42798 EUVD-2023-47225

AutomataCI Release Job Can Revert Repo to First Commit

Published Sep 22, 2023 · Updated Sep 24, 2024 · Assigned by GitHub_M

Description

AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a workaround, make sure the `PROJECT_PATH_RELEASE` (e.g. `releases/`) directory is manually and actually `git cloned` properly, making it a different git repostiory from the root git repository.

Affected products

VendorProductAffectedFixed
ChewKeanHo AutomataCI < 1.5.0 —

References