You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@mnemonic.apache.org by "Zhen Li (Jira)" <ji...@apache.org> on 2022/03/11 06:27:00 UTC

[jira] [Resolved] (MNEMONIC-734) Unsanitized input from a command line argument in run.py

     [ https://issues.apache.org/jira/browse/MNEMONIC-734?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Zhen Li resolved MNEMONIC-734.
------------------------------
    Resolution: Fixed

> Unsanitized input from a command line argument in run.py
> --------------------------------------------------------
>
>                 Key: MNEMONIC-734
>                 URL: https://issues.apache.org/jira/browse/MNEMONIC-734
>             Project: Mnemonic
>          Issue Type: Bug
>          Components: Tools
>    Affects Versions: 0.17.0
>            Reporter: Wang, Gang
>            Assignee: Zhen Li
>            Priority: Major
>             Fix For: 0.17.0
>
>          Time Spent: 2h 10m
>  Remaining Estimate: 0h
>
> There are 3 security vulnerabilities identified in script run.py, which is about command argument of subprocess.check_call(...). It needs to be sanitized before passing to this call.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)