Users able to edit build spec can execute arbitrary java code (OD-88)

Robin Shen opened 6 years ago

This is caused by using message template in hibernate validator. Details for the issue: https://securitylab.github.com/advisories/GHSL-2020-028-netflix-titus

OneDev changed state to 'Committed' 6 years ago
Previous Value Current Value
Open

Committed
Robin Shen batch edited 6 years ago
Name Previous Value Current Value
State

Committed

Closed
Login to comment

Previous Value	Current Value
Open	Committed

Name	Previous Value	Current Value
State	Committed	Closed

Iterations

Issue Votes (0)

Watchers (1)

Reference

OD-88