地图 / Canonical Snapcraft vulnerable to remote code execution under certain conditions

Canonical Snapcraft vulnerable to remote code execution under certain conditions

代码执行 / Unlabeled / #1073202

厂商: Internet Bug Bounty
严重程度: 低危 · CVSS 6.8
赏金: —
弱点: Unlabeled
研究员: @itszn
披露日期: 2021-07-23
资产: IBB (Legacy)
CVE: CVE-2020-27348

该报告还没有中文解读。

原文摘录

摘自原文（9133 字符中的一小部分）

Preface: I apologize for previously submitting this bug to hacker1 before it was fully addressed by the Ubuntu Security Team

原文中的代码

itszn@ubuntu:~$ docker

Command 'docker' not found, but can be installed with:

sudo snap install docker
...

See 'snap info docker' for additional versions.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

2021-01-07报告提交
2021-07-23公开披露

阅读 HackerOne 原文 ↗作者 @itszn · 版权归作者与 Internet Bug Bounty 所有

同类报告

CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoCGoogle · —Remote code execution [CVE-2023-36845]MTN Group · 2024-10-09 Remote Code Execution on Proxy Service (as root)██████ · —XSS Vulnerability on Pressable/Atomic Hosting Platform via unescaped admin notices leads to code executionAutomattic · 2026-02-18 Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Fastify · 2025-05-28 Reflected XSS and Server Side Template Injection in all HubSpot CMSesHubSpot Inactive · —

Canonical Snapcraft vulnerable to remote code execution under certain conditions · 破甲 POJIA