{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-02T00:25:06.475","vulnerabilities":[{"cve":{"id":"CVE-2023-42798","sourceIdentifier":"security-advisories@github.com","published":"2023-09-22T16:15:09.753","lastModified":"2026-06-17T06:24:32.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a workaround, make sure the `PROJECT_PATH_RELEASE` (e.g. `releases/`) directory is manually and actually `git cloned` properly, making it a different git repostiory from the root git repository."},{"lang":"es","value":"AutomataCI es un repositorio de plantillas git equipado con herramientas de CI semiautónomas integradas nativas. Un problema en las versiones 1.4.1 y anteriores puede permitir que un trabajo de lanzamiento restablezca el repositorio raíz de git al primer commit. La versión 1.5.0 tiene un parche para este problema. Como workaround, asegúrese de que el directorio `PROJECT_PATH_RELEASE` (por ejemplo, `releases/`) esté manual y realmente `git clonado` correctamente, convirtiéndolo en un repositorio de git diferente del repositorio raíz de git."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"ChewKeanHo","product":"AutomataCI","versions":[{"version":"< 1.5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.8},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T14:16:22.777469Z","id":"CVE-2023-42798","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hollowaykeanho:automataci:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5.0","matchCriteriaId":"38ABEABE-2FD7-4B8C-B5B2-DDC892D2CE75"}]}]}],"references":[{"url":"https://github.com/ChewKeanHo/AutomataCI/issues/93","source":"security-advisories@github.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/ChewKeanHo/AutomataCI/security/advisories/GHSA-6q23-vhhg-8h89","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/ChewKeanHo/AutomataCI/issues/93","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/ChewKeanHo/AutomataCI/security/advisories/GHSA-6q23-vhhg-8h89","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}