mirror of
https://github.com/openwrt/luci.git
synced 2026-05-31 10:31:55 +08:00
44445a8097
The `luci.wireguard.generateQrCode` UBUS method allows injecting arbitrary shell code by not sanitizing the `privkey` and `allowed_ips` arguments before concatenating them into shell command expressions. Signed-off-by: Jo-Philipp Wich <jo@mein.io>