Remote Code Execution in Slack desktop apps

Re:Remote Code Execution in Slack desktop apps by wglb on Saturday August 29, 2020 @02:29PM (#24318317)

I've been in security for a while and once received a report of a CVSS score that was egregiously high at Critical.

I modified the assumptions that were made by the reporter and came out with Low.

This is one example of why this is a nonsense metric.

[ Parent | on HN ]

Re:Remote Code Execution in Slack desktop apps by jsploit on Saturday August 29, 2020 @02:33PM (#24318349)

Any metric is nonsense if used improperly.

[ Parent | on HN ]

Re:Remote Code Execution in Slack desktop apps by wglb on Saturday August 29, 2020 @02:35PM (#24318368)

I am arguing that there is no proper way to use this.

[ Parent | on HN ]

Re:Remote Code Execution in Slack desktop apps by refulgentis on Saturday August 29, 2020 @11:11PM (#24321068)

Any ouija board lies with the wrong seance supervisor

[ Parent | on HN ]