canonical / canonical/devpack-for-spring-cli

The 'itemId' variable in 'SetupEntryFactory.java' is not escaped before execution

Open
#292 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
1
Forks
5
Avg merge
1d 20h
Merged PRs (30d)
31

Description

The following configuration `itemId` values are not escaped when interpolated by `/bin/sh -c` commands:

- https://github.com/canonical/devpack-for-spring-cli/blob/c26d227cffc3f6a688b01e6b0f08252d5e228e26/src/main/java/com/canonical/devpackspring/setup/SetupEntryFactory.java#L44
- https://github.com/canonical/devpack-for-spring-cli/blob/c26d227cffc3f6a688b01e6b0f08252d5e228e26/src/main/java/com/canonical/devpackspring/setup/SetupEntryFactory.java#L112

This could lead to a possible injection of arbitrary commands.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.