CVE-2026-57171 | CVSS: 7.7 | 严重级别: HIGH
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the catalog-generate, profile-generate, and ssp-generate author commands write generated Markdown to an attacker-influenced output path without path-traversal validation, allowing arbitrary file write outside the Trestle workspace. These commands join the user-supplied output argument onto the Trestle root and write to the result, but guard it only with an is_directory_name_allowed() task-name-collision check rather than the Pat
参考链接:
• https://github.com/oscal-compass/compliance-trestle/commit/37ed44f5f2e074202c8eb
• https://github.com/oscal-compass/compliance-trestle/releases/tag/v4.1.0
• https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-4q5
📌 数据来源: NVD 官方