Arbitrary Code Execution in de.tum.in.ase:artemis-java-test-sandbox
Summary
GHSA-98hq-4wmw-98w9: Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox. Affects de.tum.in.ase:artemis-java-test-sandbox versions < 1.11.2. Fixed in 1.11.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The de.tum.in.ase:artemis-java-test-sandbox package is a Maven ecosystem package used for testing Java code in a sandboxed environment. It provides functionality for loading and executing code within a controlled environment. However, a vulnerability has been discovered in the package that allows for arbitrary code execution.
Vulnerability Detail
The vulnerability arises from the missing checkLink(String) override in the SecurityManager of the de.tum.in.ase:artemis-java-test-sandbox package. This allows students or users to load libraries and execute arbitrary code using System.load(String) or System.loadLibrary(String). An example code snippet demonstrating the issue is as follows:
private static native void start(List<String> args);
public static void main(String[] args) {
System.load(new File("path_to_lib.so").getAbsolutePath());
start(List.of(args));
}
The impact of this vulnerability is arbitrary code execution, which can lead to unauthorized access, data breaches, or system compromise.
How To Fix
Minimum fixed version
1.11.2
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Applying the fix mentioned in the 'how_to_fix' section is the recommended approach.
Conclusion
The de.tum.in.ase:artemis-java-test-sandbox package is vulnerable to arbitrary code execution due to a missing checkLink(String) override in the SecurityManager. This vulnerability can have severe consequences, including unauthorized access, data breaches, or system compromise. To mitigate this vulnerability, it is recommended to apply the fix mentioned in the 'how_to_fix' section. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for de.tum.in.ase:artemis-java-test-sandbox →
FAQ
The impact of this vulnerability is arbitrary code execution, which can lead to unauthorized access, data breaches, or system compromise.
To fix this vulnerability, the missing checkExec(String) method should be added to the SecurityManager. Refer to the 'how_to_fix' section for the code snippet.
There is no specific workaround mentioned for this vulnerability. Applying the fix mentioned in the 'how_to_fix' section is the recommended approach.
Versions 0 to 1.11.1 of de.tum.in.ase:artemis-java-test-sandbox are affected by this vulnerability.
You can find more information about this vulnerability in the GitHub Advisory Database: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-98hq-4wmw-98w9/GHSA-98hq-4wmw-98w9.json
References
Related vulnerabilities
Recent vulnerabilities recorded for de.tum.in.ase:artemis-java-test-sandbox.
