Skip to content

Commit 583ee81

Browse files
unetd: fix command injection vulnerability
Properly escape shell variables `out_file` and `bin_path` within `package/network/services/unetd/files/unet.uc` by replacing any internal single quotes and wrapping them in single quotes to prevent potential command injection when passing arguments to `sh -c`. Signed-off-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com> Co-authored-by: manupawickramasinghe <73810867+manupawickramasinghe@users.noreply.github.com>
1 parent 39c5d73 commit 583ee81

0 file changed

File tree

    0 commit comments

    Comments
     (0)