CVE-2024-21623

CVE-2024-21623 is a critical expression injection vulnerability affecting the /mehah/otclient "Analysis - SonarCloud" workflow in OTClient, an alternative Tibia client. This flaw allows an unauthenticated attacker to remotely execute commands on the runner, exfiltrate sensitive secrets, and alter the repository. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.