| शीर्षक | alldatacenter alldata v0.6.8 CWE-78 |
|---|
| विवरण | The service-data-dts endpoint POST /log/killJob takes a JSON request body whose processId field is concatenated directly into a shell command string and passed to Runtime.getRuntime().exec(String). Because the service disables CSRF and marks every request permitAll() in its Spring Security configuration, this endpoint is reachable with no credentials. An unauthenticated attacker can inject shell metacharacters via processId to execute arbitrary commands as the service account. |
|---|
| स्रोत | ⚠️ https://github.com/alldatacenter/alldata/issues/833 |
|---|
| उपयोगकर्ता | fakebug (UID 94486) |
|---|
| सबमिशन | 26/06/2026 04:18 AM (2 महीनों पहले) |
|---|
| संयम | 14/08/2026 07:50 AM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 258934 [Alldata 0.4.6 processId अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|