Re:PeaZip: Open-source file compression and encryption software
by chungy on Saturday May 11, 2024 @11:46AM
(#40328812)
I haven't ran nor looked at the code for PeaZip, but the website describes the program as a GUI wrapper around command line utilities. I highly suspect it's the sub-shell thing.
[ Parent
| on HN ]
Re:PeaZip: Open-source file compression and encryption software
by fallingsquirrel on Saturday May 11, 2024 @01:51PM
(#40329585)
That's concerning. What if your archive password is ;rm -rf --no-preserve-root /? There might be an easy CVE for the taking here.