canonical / canonical/devpack-for-spring-cli
The 'itemId' variable in 'SetupEntryFactory.java' is not escaped before execution
Open
- Dominant language
- Java
- Stars
- 1
- Forks
- 5
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 31
Description
The following configuration `itemId` values are not escaped when interpolated by `/bin/sh -c` commands:
- https://github.com/canonical/devpack-for-spring-cli/blob/c26d227cffc3f6a688b01e6b0f08252d5e228e26/src/main/java/com/canonical/devpackspring/setup/SetupEntryFactory.java#L44
- https://github.com/canonical/devpack-for-spring-cli/blob/c26d227cffc3f6a688b01e6b0f08252d5e228e26/src/main/java/com/canonical/devpackspring/setup/SetupEntryFactory.java#L112
This could lead to a possible injection of arbitrary commands.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.