search

varol-adem / juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
https://owasp-juice.shop
MIT License
0 stars 0 forks source link

Fix code scanning alert - Semgrep Finding: yaml.docker-compose.security.no-new-privileges.no-new-privileges #12

Closed varol-adem closed 9 months ago

varol-adem commented 9 months ago

Privilege Escalation yapılıyor. Tracking issue for:

varol-adem commented 9 months ago

Çözüm için; allowPrivilegeEscalation: false gibi bir şart eklenebilir.