CVE-2024-27763: Command injection in BasicSR via SLURM_NODELIST 0 ▲ Yunus Aydın Blog 55 days ago · Tech · hide · Fediverse post CVE-2024-27763 (CVSS 5.3): BasicSR 1.4.2 and earlier interpolates the SLURM_NODELIST environment variable into a shell command, letting a local attacker run arbitrary commands. Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town
