This repository has been archived by the owner on Jun 13, 2020. It is now read-only.

Path Manipulation #172

Open

QiAnXinCodeSafe opened this issue Jun 12, 2020 · 0 comments

QiAnXinCodeSafe commented Jun 12, 2020

aomi/aomi/cli.py

Line 365 in 84da2df

return parser, parser.parse_args()

aomi/aomi/helpers.py

Line 218 in 84da2df

os.mkdir(path)

Allowing user input to control paths used in file system operations could enable an attacker to access or modify otherwise protected system resources

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.