aliasrobotics / RVD

Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
https://aliasrobotics.com
GNU General Public License v3.0
168 stars 30 forks source link

Low down the severity for running os commands #3331

Closed LanderU closed 3 years ago

LanderU commented 3 years ago

Before this patch:

    Total issues (by severity):
        Undefined: 0.0
        Low: 13.0
        Medium: 0.0
        High: 4.0

After:

    Total issues (by severity):
        Undefined: 0.0
        Low: 17.0
        Medium: 0.0
        High: 1.0

I've tried to completely remove the issues, even low ones, but, I think you need to add exceptions for these type of calls.

The remaining High issue is in the following piece of code:

I'll let Alias Robotics developers to decide how to proceed here.

Signed-off-by: LanderU lander.usategui@gmail.com

vmayoral commented 3 years ago

Thanks for this!