GitHub's CodeQL found critical RCE in German Covid app server (github.com) 1 points by cyptus 5y ago ↗ HN
[–] cyptus 5y ago ↗ blog post (german): https://www.coronawarn.app/de/blog/2020-11-19-security-updat...the template engine allowed remote code injected throug a country name into the error message
1 comment
[ 2.8 ms ] story [ 9.3 ms ] threadthe template engine allowed remote code injected throug a country name into the error message