CVE-2023-34111

The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.title }}` in a bash command within the GitHub workflow. Attackers can inject malicious commands which will be executed by the workflow. This happens because `${{ github.event.pull_request.title }}` is directly passed to bash command on like 25 of the workflow. This may allow an attacker to gain access to secrets which the github action has access to or to otherwise make use of the compute resources.

• CWE-20
• CWE-77

• https://github.com/taosdata/grafanaplugin/blob/master/.github/workflows/release-pr-merged.yaml#L25Product
• https://github.com/taosdata/grafanaplugin/security/advisories/GHSA-23wp-p848-hcgrExploit, Third Party Advisory
• https://securitylab.github.com/research/github-actions-untrusted-input/Exploit, Third Party Advisory
• https://github.com/taosdata/grafanaplugin/blob/master/.github/workflows/release-pr-merged.yaml#L25Product
• https://github.com/taosdata/grafanaplugin/security/advisories/GHSA-23wp-p848-hcgrExploit, Third Party Advisory
• https://securitylab.github.com/research/github-actions-untrusted-input/Exploit, Third Party Advisory

Published

Jun 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34106GLPI is a free asset and IT management software package. Ver…6.5
• CVE-2023-34107GLPI is a free asset and IT management software package. Ver…6.5
• CVE-2023-34108mailcow is a mail server suite based on Dovecot, Postfix and…8.8
• CVE-2023-34109zxcvbn-ts is an open source password strength estimator writ…7.5
• CVE-2023-3411The Image Map Pro – Drag-and-drop Builder for Interactive Im…4.3
• CVE-2023-34110Flask-AppBuilder is an application development framework, bu…2.7
• CVE-2023-34112JavaCPP Presets is a project providing Java distributions of…8.8
• CVE-2023-34113Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-34114Exposure of resource to wrong sphere in Zoom for Windows and…6.5
• CVE-2023-34115Buffer copy without checking size of input in Zoom Meeting …3.8
• CVE-2023-34116Improper input validation in the Zoom Desktop Client for Win…8.8
• CVE-2023-34117Relative path traversal in the Zoom Client SDK before versio…3.3