CVE-2024-49400 - Cloudflare Tacquito regex Injection

CVE ID : CVE-2024-49400
Published : Oct. 17, 2024, 6:15 p.m. | 24 minutes ago
Description : Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That would have potentially allowed unauthorized commands to be executed.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...