Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.OpenAPI.Kiota | nuget | < 1.32.0 | 1.32.0 |
| Microsoft.OpenAPI.Kiota.Builder | nuget | < 1.32.0 | 1.32.0 |
Miggo AIRoot Cause AnalysisThe vulnerability lies in the Kiota Python code generator's handling of enum descriptions from OpenAPI specifications. The root cause is twofold. First, the PythonConventionService.RemoveInvalidDescriptionCharacters function failed to strip newline characters from the description. This allowed an attacker to craft a malicious description containing newlines, which would then be rendered as multi-line comments in the generated Python code. By injecting newlines, an attacker could break out of the comment and inject arbitrary Python code that would be executed when the generated module is imported. Second, the KiotaBuilder.SetEnumOptions function did not call a cleanup function on the description, allowing the malicious description to be processed by the vulnerable RemoveInvalidDescriptionCharacters function. The patch addresses both issues by adding newline sanitization in RemoveInvalidDescriptionCharacters and by adding a call to CleanupDescription in SetEnumOptions.
Microsoft.Kiota.Builder.Writers.Python.PythonConventionService.RemoveInvalidDescriptionCharacterssrc/Kiota.Builder/Writers/Python/PythonConventionService.cs
Microsoft.Kiota.Builder.KiotaBuilder.SetEnumOptionssrc/Kiota.Builder/KiotaBuilder.cs