3 ms·
There are countless ways that this vulnerability could be an issue irrespective of whether user-provided data are being logged. Attackers achieving RCE on a mac
by samhw 5y ago
There are countless ways that this vulnerability could be an issue irrespective of whether user-provided data are being logged. Attackers achieving RCE on a machine in your infrastructure is likely extremely bad for most realistic architectures.
- jacquesm 5y agoI think the main takeaway for all of these is that tricky and possibly unexpected behavior should always be explicitly enabled. And it's not the first time that we are learning that particular lesson so there really are no excuses.