Description
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do shell script payload, which runs as the victim user when Show in Finder is chosen.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gitahead | gitahead | ≤ 2.7.1 | — |
References
- GitHub Issue #663 issue-tracking
- https://github.com/gitahead/gitahead product
- https://github.com/gitahead/gitahead/blob/v2.7.1/src/tools/ShowTool.cpp#L40-L48 technical-description
- VulnCheck Advisory: GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript third-party-advisory