2 matches found
OliveTin's email argument makes compliance harder, enables log injection
Summary The typeSafetyCheckEmail function in service/internal/executor/arguments.go calls log.Errorf on every invocation including when validation succeeds err == nil. This means every email address submitted by any user is written to the application's ERROR-level log unconditionally. Because the...
Exploit for CVE-2018-19323
CVE-2018-19323: GIGABYTE GDrv Exploitation Framework ---...