جزئیات آسیب‌پذیری
CVE-2026-48708
OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination
شرح رسمی (انگلیسی)
OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance (tpl package-level variable in service/internal/tpl/templates.go) across all goroutines. Every action execution calls tpl.Parse(source) followed by t.Execute() on this shared instance with no synchronization. When two or more actions execute concurrently (which is the normal case — each ExecRequest spawns a goroutine), a race condition occurs: one goroutine's Parse overwrites the template tree while another goroutine is calling Execute, causing cross-user command contamination, Go runtime panic, and incorrect command execution. This issue has been resolved in version 3000.13.0.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| OliveTin | OliveTin | < 3000.13.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳- https://github.com/OliveTin/OliveTin/commit/d74da9314005954dd49fa20dabf272247bc76519 x_refsource_MISC
- https://github.com/OliveTin/OliveTin/releases/tag/3000.13.0 x_refsource_MISC
- https://github.com/OliveTin/OliveTin/security/advisories/GHSA-7fq5-7wr8-rjwj x_refsource_CONFIRM
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۲۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۰۳
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- اثبات مفهوم
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- CWE-567Unsynchronized Access to Shared Data in a Multithreaded Context