Octobot before 0.4.4 mishandles Tentacles upload
Critical severity
GitHub Reviewed
Published
Jul 17, 2022
to the GitHub Advisory Database
•
Updated Jan 29, 2023
Description
Published by the National Vulnerability Database
Jul 16, 2022
Published to the GitHub Advisory Database
Jul 17, 2022
Reviewed
Jul 20, 2022
Last updated
Jan 29, 2023
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
References