Headline

GHSA-fwvc-9xhj-26v5: Badaso vulnerable to Remote Code Execution via malicious file upload

Badaso allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

2 years ago

ghsa

Open in Source

#git #rce #perl #auth

Badaso vulnerable to Remote Code Execution via malicious file upload

High severity GitHub Reviewed Published Oct 26, 2022 • Updated Oct 26, 2022

Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

2 years ago

CVE

Open in Source

#vulnerability #git #perl #auth