Skip to content
OpenAdvisories

Archive

18 July 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2020-36762 Public exploit

    ONS Digital RAS Collection Instrument comment.yml jobs os command injection

    A vulnerability was found in ONS Digital RAS Collection Instrument up to 2.0.27 and classified as critical. Affected by this issue is the function jobs of the file .github/workflows/comment.yml. The manipulation of the argument $COMMENT_BODY leads to os comma…