Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le novembre 16, 2022, 03:07:57
-
Log4Shell-like code execution hole in popular Backstage dev tool
Good old "string templating", also known as "string interpolation", in the spotlight again...
Source: Log4Shell-like code execution hole in popular Backstage dev tool (https://nakedsecurity.sophos.com/2022/11/15/log4shell-like-code-execution-hole-in-popular-backstage-dev-tool/)