13 ms·
I mean the same way you ran ls, you could run /bin/bash? Which is kind of pointless because the ls command is probably executed through a shell anyways. So te
by TZubiri 2y ago
I mean the same way you ran ls, you could run /bin/bash?
Which is kind of pointless because the ls command is probably executed through a shell anyways.
So technically correct. But getting root or running a shell usually means you can run arbitrary commands, which is a check here (albeit I wouldn't say there's root access)
- MeetingsBrowser 2y agoThere is no security implication for running /bin/bash in a service that provides you a sandbox environment to run arbitrary shell commands in. It is like reporting that AWS lambda is susceptible to arbitrary code execution.
- TZubiri 2y agoYes, I too read the article. But he did run a shell