PT-2023-11902 · Unknown · Ons Digital Ras Collection Instrument

Name of the Vulnerable Software and Affected Versions: ONS Digital RAS Collection Instrument versions up to 2.0.27 Description: A critical issue was found in the function jobs of the file .github/workflows/comment.yml. The manipulation of the argument $COMMENT BODY leads to os command injection...