CVE-2024-41815
Vulnerability from cvelistv5
Published
2024-07-26 21:01
Modified
2024-08-02 04:46
Severity ?
7.4 (High) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with custom commands, so the scope is limited, and without knowledge of others' commands, it could be hard to successfully target someone. Version 1.20.0 fixes the vulnerability.
References
security-advisories@github.comhttps://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74Patch
security-advisories@github.comhttps://github.com/starship/starship/releases/tag/v1.20.0Release Notes
security-advisories@github.comhttps://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74Patch
af854a3a-2127-422b-91ae-364da2661108https://github.com/starship/starship/releases/tag/v1.20.0Release Notes
af854a3a-2127-422b-91ae-364da2661108https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5Exploit, Vendor Advisory
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:starship:starship:1.0.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "starship",
            "vendor": "starship",
            "versions": [
              {
                "lessThan": "1.20.0",
                "status": "affected",
                "version": "1.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41815",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-29T14:13:04.454740Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-29T18:28:53.805Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:46:52.696Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5"
          },
          {
            "name": "https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74"
          },
          {
            "name": "https://github.com/starship/starship/releases/tag/v1.20.0",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/starship/starship/releases/tag/v1.20.0"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "starship",
          "vendor": "starship",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.20.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with custom commands, so the scope is limited, and without knowledge of others\u0027 commands, it could be hard to successfully target someone. Version 1.20.0 fixes the vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-26T21:01:48.605Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5"
        },
        {
          "name": "https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74"
        },
        {
          "name": "https://github.com/starship/starship/releases/tag/v1.20.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/starship/starship/releases/tag/v1.20.0"
        }
      ],
      "source": {
        "advisory": "GHSA-vx24-x4mv-vwr5",
        "discovery": "UNKNOWN"
      },
      "title": "Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-41815",
    "datePublished": "2024-07-26T21:01:48.605Z",
    "dateReserved": "2024-07-22T13:57:37.137Z",
    "dateUpdated": "2024-08-02T04:46:52.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-41815\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2024-07-26T21:15:14.370\",\"lastModified\":\"2024-11-21T09:33:07.663\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quoting rules make it easily to accidentally cause shell injection when using custom commands with starship in bash. This issue only affects users with custom commands, so the scope is limited, and without knowledge of others\u0027 commands, it could be hard to successfully target someone. Version 1.20.0 fixes the vulnerability.\"},{\"lang\":\"es\",\"value\":\" Starship es un aviso entre capas. A partir de la versi\u00f3n 1.0.0 y antes de la versi\u00f3n 1.20.0, las reglas de citaci\u00f3n y/o expansi\u00f3n de shell impredecibles y no documentadas hacen que sea f\u00e1cil provocar accidentalmente una inyecci\u00f3n de shell cuando se usan comandos personalizados con starship en bash. Este problema solo afecta a los usuarios con comandos personalizados, por lo que el alcance es limitado y, sin el conocimiento de los comandos de otros, podr\u00eda ser dif\u00edcil apuntar a alguien con \u00e9xito. La versi\u00f3n 1.20.0 corrige la vulnerabilidad.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.4,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-77\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:starship:starship:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.0\",\"versionEndExcluding\":\"1.20.0\",\"matchCriteriaId\":\"10638D42-D9DD-46FB-93A0-AAF55A08CA07\"}]}]}],\"references\":[{\"url\":\"https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/starship/starship/releases/tag/v1.20.0\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/starship/starship/commit/cfc58161e0ec595db90af686ad77a73df6d44d74\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/starship/starship/releases/tag/v1.20.0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/starship/starship/security/advisories/GHSA-vx24-x4mv-vwr5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.