Lucene search
+L

4 matches found

OSV
OSV
•added 2023/06/06 4:29 p.m.•11 views

CVE-2023-34111 Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

8.1CVSS8.8AI score0.04049EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/06/06 4:29 p.m.•27 views

CVE-2023-34111 Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

8.1CVSS10AI score0.04049EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2023/06/06 4:29 p.m.•147 views

CVE-2023-34111

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

9.8CVSS8.6AI score0.04049EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/06 12:00 a.m.•3 views

CVE-2023-34111: Improper Input Validation

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

9.8CVSS8.6AI score0.04049EPSS
SaveExploits1References3
Rows per page
Query Builder