Back to bug 2124534

Who When What Removed Added
Marian Rehak 2022-09-06 12:49:21 UTC Blocks 2124535
Sage McTaggart 2022-09-07 21:39:43 UTC Depends On 2125071, 2125070, 2125074, 2125072, 2125075, 2125073, 2125076
Sage McTaggart 2022-09-07 21:41:55 UTC Doc Text A RCE attack was discovered in node-df that allows an attacker to inject code via unsanitized input. The issue occurs because a user input is concatenated inside a command that will be executed without any verification. This can compromise confidentiality, integrity, and availability.
RaTasha Tillery-Smith 2022-09-08 11:53:13 UTC Doc Text A RCE attack was discovered in node-df that allows an attacker to inject code via unsanitized input. The issue occurs because a user input is concatenated inside a command that will be executed without any verification. This can compromise confidentiality, integrity, and availability. An RCE attack was found in node-df, allowing an attacker to inject code via unsanitized input. The issue occurs because user input is concatenated inside a command that will be executed without verification.
Red Hat Bugzilla 2023-01-01 05:32:21 UTC CC amctagga
Red Hat Bugzilla 2023-01-31 22:27:08 UTC CC nbecker
Red Hat Bugzilla 2023-01-31 22:27:43 UTC CC etamir
Nick Tait 2023-03-04 18:53:38 UTC Severity high medium
Priority high medium
Red Hat Bugzilla 2023-07-07 08:35:01 UTC Assignee security-response-team nobody
Red Hat Bugzilla 2023-08-03 08:30:36 UTC CC ocs-bugs

Back to bug 2124534