4 ms·
> The $licenseFile can be controlled by the attacker using the adminUploadLicense function This is just as likely to be an RCE as it is to be a backdoor. Call
by McGlockenshire 1y ago
> The $licenseFile can be controlled by the attacker using the adminUploadLicense function
This is just as likely to be an RCE as it is to be a backdoor. Calling `include` on a file the user can write to is just asking for it. This has been a known footgun for decades.