OSV 1.4.0 · github-reviewed · 修改于 2024-11-02 05:47
发布时间
2024-10-18 02:31
GitHub 审查时间
2024-11-02 05:47
NVD 发布时间
2024-10-18 02:15
源文件
advisories/github-reviewed/2024/10/GHSA-j42f-wc6v-5xpq/GHSA-j42f-wc6v-5xpq.json
该公告已于 2024-11-02 05:47 撤回
内容仅用于保留外部引用,请不要将其当作仍然有效的安全结论。
Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That would have potentially allowed unauthorized commands to be executed.