Jo-Philipp Wich 44445a8097 luci-proto-wireguard: fix potential shell injection vulnerabilities ...

The `luci.wireguard.generateQrCode` UBUS method allows injecting
arbitrary shell code by not sanitizing the `privkey` and `allowed_ips`
arguments before concatenating them into shell command expressions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

2021-10-08 20:27:13 +02:00

..

luci-proto-3g

protocols: make APN option optional again

2021-08-19 08:59:17 +02:00

luci-proto-bonding

Merge pull request #5190 from TDT-AG/pr/20210715-proto-bonding

2021-08-09 19:47:23 +02:00

luci-proto-gre

protocols: unify TOS and TTL description strings

2021-06-07 13:59:03 +02:00

luci-proto-hnet

treewide: drop MAC and MTU from interfaces (protocols)

2021-05-28 15:34:41 +02:00

luci-proto-ipip

treewide: move templates and libraries not used by the core to luci-compat

2019-11-03 17:56:58 +01:00

luci-proto-ipv6

treewide: drop MAC and MTU from interfaces (protocols)

2021-05-28 15:34:41 +02:00

luci-proto-modemmanager

protocols: make APN option optional again

2021-08-19 08:59:17 +02:00

luci-proto-ncm

protocols: make APN option optional again

2021-08-19 08:59:17 +02:00

luci-proto-openconnect

treewide: remove rendundant proto handler options

2021-03-15 11:41:44 +01:00

luci-proto-openfortivpn

luci-proto-openfortivpn: update config option names

2020-08-26 21:54:06 -04:00

luci-proto-ppp

treewide: consolidate {IPv4,IPv6,MAC} {address,gateway} spellings

2021-06-07 12:48:08 +02:00

luci-proto-pppossh

treewide: consolidate {IPv4,IPv6,MAC} {address,gateway} spellings

2021-06-07 12:48:08 +02:00

luci-proto-qmi

protocols: make APN option optional again

2021-08-19 08:59:17 +02:00

luci-proto-relay

treewide: move templates and libraries not used by the core to luci-compat

2019-11-03 17:56:58 +01:00

luci-proto-sstp

protocols: fix interface.ipv6 vs. device.ipv6 option conflict

2021-03-29 22:35:46 +02:00

luci-proto-vpnc

treewide: remove rendundant proto handler options

2021-03-15 11:41:44 +01:00

luci-proto-vxlan

treewide: drop MAC and MTU from interfaces (protocols)

2021-05-28 15:34:41 +02:00

luci-proto-wireguard

luci-proto-wireguard: fix potential shell injection vulnerabilities

2021-10-08 20:27:13 +02:00