3 ms·
clicking links should not be a security issue and yes the CVE is totally deserved: that's remote code execution.
by xxs 8mo ago
clicking links should not be a security issue and yes the CVE is totally deserved: that's remote code execution.
- NetMageSCW 8mo agoHow is the code execution remote?
- xxs 8mo agoIt's remote from the attacker point of view. It allows to remote execute the code the attacker provided. It'd be the same to upload a file to a web server that gets to be run by the said web server, except this time it's done with "notepad.exe"