Threats tagged 'ghsa-6cqg-7298-jcjp'

A vulnerability in konflux-ci allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. This flaw can be exploited by a local attacker with administrative privileges who can supply arguments to affected scripts, causing unintended command substitution and execution with deployment runner privileges. Standard configurations do not expose this issue to untrusted input, preventing remote exploitation.