Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/04/18 8:8 a.m.78 views

Homebrew: Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official taps

Description Due to improper parsing of Git diff in Homebrew/actions/review-cask-pr, it's possible to confuse parser to ignore additional lines. Which leads injection of malicious Ruby scripts. Root cause review-cask-pr uses the git diff file to check if the pull request is "simple" enough to...

2.4AI score
SaveExploits0
Rows per page
Query Builder