Modify

Opened 4 years ago

Closed 4 years ago

#11465 closed defect (fixed)

Command injection

Reported by: Jun Omae Owned by: Philippe Lang
Priority: normal Component: CryptDataPlugin
Severity: normal Keywords:
Cc: Trac Release: 1.0

Description

[[CPassword(' && cat /etc/passwd && exit 0; ')]]

Attachments (0)

Change History (4)

comment:1 Changed 4 years ago by anonymous

Oups, thanks for the notifications... I'll solve that.

comment:2 Changed 4 years ago by Jun Omae

Ah, should I create a issue on github?

comment:3 Changed 4 years ago by anonymous

No, that's ok so. Just want to avoid having to push code in two different places, but for tickets, that's different.

comment:4 Changed 4 years ago by anonymous

Resolution: fixed
Status: newclosed

Problem solved in version 0.9.3 of the plugin. Thanks for the report!

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Philippe Lang.
The resolution will be deleted.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.