Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-30066

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code.)
Exploit prediction scoring system (EPSS) score
EPSS Score 0.482
EPSS Ranking 97.6%
CVSS Severity
CVSS v3 Score 8.6
Proposed Action
tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens (PATs), npm tokens, and private RSA keys.
Ransomware Campaign
Unknown
References
Products affected by CVE-2025-30066


Contact Us

Shodan ® - All rights reserved