Code Injection in eugeneware/windows-edge

Valid

Reported on

Jun 16th 2020


Overview

windows-edge allows you to launch a new Microsoft Edge tab on Windows

The issue occurs because a user input is formatted inside a command that will be executed without any check.

Occurrences

References

to join this conversation