| शीर्षक | didi super-jacoco 1.0 Command Injection |
|---|
| विवरण | Super-Jacoco is a platform for collecting full and diff coverage of Java code, developed based on Jacoco and git. It enables the collection of code coverage data with low cost and no intrusion. It is an open-source platform on https://github.com/didi/super-jacoco.
When accessing the triggerEnvCov Interface with special request, unauthorized attackers can execute any command on the target system. Attacker can inject command in the parameter uuid. |
|---|
| स्रोत | ⚠️ https://github.com/didi/super-jacoco/issues/48 |
|---|
| उपयोगकर्ता | gaogaostone (UID 53740) |
|---|
| सबमिशन | 21/10/2024 03:30 AM (2 साल पहले) |
|---|
| संयम | 27/10/2024 10:11 AM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 281986 [didi Super-Jacoco 1.0 /cov/triggerEnvCov uuid अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|