3 ms·
The thing i don't get is the statement "Attack Vector Network" in the advisory as well at the statement it allows a remote attacker to write files. I don't und
by AnotherGoodName 5y ago
The thing i don't get is the statement "Attack Vector Network" in the advisory as well at the statement it allows a remote attacker to write files.
I don't understand the bar to be called a Network Attack Vector. Surely there's more to this than asking the user to run shell commands right?
- cjbprime 5y agoIt sounds like if a web service allowed a user to upload a file with attacker-chosen filename, which it will then run zgrep on, it would be vulnerable. Perhaps that's why?