Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

146:growl:Command Injection #200

Closed
shepdelacreme opened this issue Feb 1, 2019 · 0 comments
Closed

146:growl:Command Injection #200

shepdelacreme opened this issue Feb 1, 2019 · 0 comments
Assignees
@marshyski
Labels
critical security

Comments

@shepdelacreme
Copy link

CVES CVE-2017-16042
CWE CWE-94
References: Issue #60
PR #61
Affected versions of growl do not properly sanitize input prior to passing it into a shell command, allowing for arbitrary command execution.
@marshyski
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees

@marshyski marshyski

Labels
critical security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@marshyski @shepdelacreme