Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 6 days ago6 views

Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`

Summary kiota info — the command developers run to learn which packages to install after generating a client — read the x-ms-kiota-info extension from the OpenAPI description and presented the spec-supplied dependencyInstallCommand and dependency name/version as the tool's own recommended install...

9.3CVSS6AI score0.0319EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder