| عنوان | didi super-jacoco 1.0 Command Injection |
|---|
| الوصف | Super-Jacoco is a platform for collecting full and diff coverage of Java code, developed based on Jacoco and git. When accessing the triggerUnitCover Interface with special request, unauthorized attackers can execute any command on the target system. Attacker can inject command in the parameter uuid. |
|---|
| المصدر | ⚠️ https://github.com/didi/super-jacoco/issues/49 |
|---|
| المستخدم | gaogaostone (UID 53740) |
|---|
| ارسال | 28/10/2024 07:45 AM (2 سنوات منذ) |
|---|
| الاعتدال | 06/11/2024 11:05 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 283315 [didi Super-Jacoco 1.0 /cov/triggerUnitCover uuid تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|