Skip to content
Commit 44445a80 authored by Jo-Philipp Wich's avatar Jo-Philipp Wich
Browse files

luci-proto-wireguard: fix potential shell injection vulnerabilities



The `luci.wireguard.generateQrCode` UBUS method allows injecting
arbitrary shell code by not sanitizing the `privkey` and `allowed_ips`
arguments before concatenating them into shell command expressions.

Signed-off-by: default avatarJo-Philipp Wich <jo@mein.io>
parent 21af8a34
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment