5 ms·
Its a bash thing, or more specifically, the issue is with the fact that many (mostly old) web applications/web servers pass content from user straight to bash a
by fiedzia 12y ago
Its a bash thing, or more specifically, the issue is with the fact that many (mostly old) web applications/web servers pass content from user straight to bash as environment variables,
not expecting this to cause any problems.
- scott_s 12y agoTo clarify further: it's a bash thing, because the arbitrary code execution happens when bash parses environment variables.