Hacker News new | ask | show | jobs
by rvz 161 days ago
Probably nothing.
1 comments
AlexAltea 160 days ago
Probably nothing based on what? I have reproduced the finding locally...

Any website can trivially run arbitrary code as the current user if OpenCode is installed; that's CVSS ~10.

link