Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

consider/protect against malicious request overwrite #114

Open
xopham opened this issue Feb 29, 2024 · 0 comments
Open

consider/protect against malicious request overwrite #114

xopham opened this issue Feb 29, 2024 · 0 comments

Comments

@xopham
Copy link
Contributor

xopham commented Feb 29, 2024

semgr8s has to store requests as files. it uses the admission request uid as file reference. this might be attacked by sending a high number of requests to intermittently overwrite the semgr8s request or results file and inject data into another request.

relevance and explotability of attack should be investigated. If feasible, it might be protected using a non-user provided, collision resistant file handler

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant