Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability description clearly states that the hooks edit command in cmd/uniget/hooks.go was vulnerable due to parsing UNIGET_EDITOR or EDITOR with strings.Split(editor, " ") and passing every space-delimited suffix as an argument to the selected editor executable. The provided commit 7b4f18a9f00f0955f830c7ccf266ed0de5f9fd91 directly addresses this issue. The diff shows that within the editHooksCmd's RunE function, the line editorWithArgs := strings.Split(editor, " ") was changed to editor := strings.Split(editorFromVariable, " ")[0]. This change ensures that only the first part of the editor command (the executable itself) is used, preventing the injection of arbitrary arguments. Additionally, the exec.Command call was changed from exec.Command(editorWithArgs[0], editorWithArgs[1:]...) to exec.Command(editor, hookFile), further restricting the arguments to only the intended hook file. Therefore, the editHooksCmd (specifically its RunE handler) is the vulnerable function responsible for processing the malicious input.
main.editHooksCmdcmd/uniget/hooks.go
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| gitlab.com/uniget-org/cli | go | < 0.27.6 | 0.27.6 |