Harness 允许在 github.com/harness/gitness 中的 Gitness LFS 服务器中进行任意文件写入

攻击者可以利用此漏洞在 Gitness LFS 服务器的文件系统中写入任意文件。这可能导致多种攻击场景，包括：覆盖关键配置文件，从而改变服务器的行为；上传恶意代码并执行，从而获得对系统的控制权；修改或删除敏感数据，导致数据泄露或服务中断。由于 Gitness LFS 通常用于存储大型二进制文件，因此此漏洞可能影响大量数据。如果 Gitness LFS 与其他系统集成，攻击者可能利用此漏洞进行横向移动，攻击其他系统。

Organizations using Harness Gitness for Git repository management are at risk, particularly those running older, unpatched versions. Shared hosting environments where multiple users have access to the Gitness instance are especially vulnerable, as a compromised user account could be used to exploit this vulnerability.

• go / server: Monitor Gitness logs for unusual file creation events, especially in unexpected directories. Use journalctl -u gittess to filter for file access logs. • generic web: Check for unexpected files appearing in the Gitness LFS storage directory. Use curl -I <gitness_url>/lfs/ to check for directory listing exposure (disable if present). • generic web: Review access logs for requests attempting to write files to unusual locations. Use grep -i 'PUT /lfs/' /var/log/apache2/access.log (adjust path as needed).

1. 2025-09-17Disclosure

   disclosure

1. 已保留2025-08-27
2. 发布日期2025-09-17
3. EPSS 更新日期2026-03-23

最有效的缓解措施是立即升级到修复版本 1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13。如果无法立即升级，可以考虑以下临时缓解措施：限制 Gitness LFS 服务器的访问权限，仅允许授权用户访问；实施严格的文件访问控制策略，防止未经授权的文件写入；监控 Gitness LFS 服务器的文件系统，检测异常的文件修改活动。升级后，请验证修复是否成功，例如通过尝试写入受影响的文件路径，确认写入操作被拒绝。