[thecaptainjohnson]

• connect to a malicious IPP server via discovery (cups-browsed): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CWE-940
  https://github.com/OpenPrinting/cups-bro...ed.c#L3994
  
• Returning malicious IPP attributes (cups-browsed, libppd): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N - CWE-20
  https://github.com/OpenPrinting/cups-bro...ed.c#L8628
  https://github.com/OpenPrinting/libppd/b...tor.c#L353
  
• Command execution (cups-browsed, cups-filters): 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L - CWE-94
  https://github.com/OpenPrinting/cups-bro...ed.c#L8939
  https://github.com/OpenPrinting/cups-fil...rip.c#L983
  

Hidden Content

You must register or login to view this content.

[xb3sh666]

Thank you bro! Can you be more specific about the affected assets?

[Yaar]

Great, thanks for the update

[yoloooow]

Yeah bro! How did you get this information so quickly?

[dvorakmaster]

this is some great commit hunting, good job

[manekineko]

tnx bro! keep us posted!

[rexcalicum]

interesting, thanks for sharing!

[3131qweasdzxc3131]

thx for sharing!!!!!!!!!!!!!

[4Grumbl3B411s]

Much appreciated!

[cyphercase]

what a way to start the week