Nuclio dashboard local platform docker ps --filter command injection (CVE-78) fix & PoC analysis

Vulnerability Key Information Summary Vulnerability Overview Vulnerability Type: Shell Command Injection (CVE-78) Vulnerability Location: parameter Vulnerability Description: The values in the parameter are directly concatenated into the shell command via without escaping special characters. This allows an attacker to construct malicious filter values (containing shell metacharacters such as , , , etc.) to execute arbitrary shell commands as the root user inside the dashboard container. Scope of Impact: - Affects only locally deployed Docker platforms ( ) - Can be triggered by unauthenticated users (no login required) - Attack path: → → shell command concatenation → command injection - Can be triggered by remote/unauthenticated clients; the local platform ( ) is affected, while the Kubernetes platform is not. Fix Solution Fix Approach: Pass the filter value as a single shell argument rather than string concatenation. Specific Changes: - Use to shell-escape the filter value. - Change to use for proper handling. - Apply escaping to the parameter as well. - Ensure the filter value is passed as a single shell argument, preventing metacharacters from being interpreted by the shell. POC / Exploitation Code Test Case (Regression Test) Core Code After Fix ( ) Vulnerability Trigger Example (Attacker-Constructed Filter Value) After escaping via , this value is passed as a single shell argument. Metacharacters such as and remain literals and are no longer interpreted and executed by the shell.

Goal Reached Thanks to every supporter — we hit 100%!

Nuclio dashboard local platform docker ps --filter command injection (CVE-78) fix & PoC analysis

More from this source