Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2023/06/06 4:29 p.m.20 views

CVE-2023-34111 Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

8.1CVSS10AI score0.04049EPSS
SaveExploits1References3
OSV
OSV
added 2023/06/06 4:29 p.m.5 views

CVE-2023-34111 Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

8.1CVSS8.8AI score0.04049EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2023/06/06 4:29 p.m.143 views

CVE-2023-34111

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

9.8CVSS8.6AI score0.04049EPSS
SaveExploits1References3
Rows per page
Query Builder