CVE-2023-43116

A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership…

published December 22, 2023

CVSS
—
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Published
2023-12-22T00:00Z
EPSS history
Timeline
  • 22 DEC 00:00Z
    A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership…
    cvelistv5