-
-
Notifications
You must be signed in to change notification settings - Fork 19
Closed
Description
I recently stumbled upon CVE-2022-44019 and noticed that the fix implemented for it can be bypassed by using backticks. Backticks are used to execute a subcommand before the main command, as the shell evaluates the expression inside the backticks first.

Metadata
Metadata
Assignees
Labels
No labels