Project

General

Profile

Actions
Copy link

Bug #14977

closed

Bug #14974: Arbitrary command execution in rudder relay API due to missing parameter sanitization

Parent ticket breaks empty classes case

Added by Alexis Mousset almost 5 years ago. Updated 9 months ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Security
Target version:
4.1.24
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

We need to handle the empty case too.

Actions
Copy link
 #1

Updated by Alexis Mousset almost 5 years ago

  • Status changed from New to In progress
  • Assignee set to Alexis Mousset
Actions
Copy link
 #2

Updated by Alexis Mousset almost 5 years ago

  • Status changed from In progress to New
  • Assignee deleted (Alexis Mousset)
  • Private changed from No to Yes
Actions
Copy link
 #3

Updated by Alexis Mousset almost 5 years ago

  • Status changed from New to Rejected

It was actually correct.

Actions
Copy link
 #4

Updated by Alexis Mousset almost 4 years ago

  • Category changed from Relay server or API to Security
Actions
Copy link
 #5

Updated by Alexis Mousset 9 months ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF