sorted by: new top controversial old
`123456’ password used in massive Danish CPR data breach in c/cybersecurity@sh.itjust.works
37
Plausible critical RCE < 3.2.1 (github.com)
 

Today I randomly felt on this release note, mentioning an RCE “under certain conditions “

Digging up a bit, it’s a full blown RCE on any default install. Worst, unless you were aware of the /storybook path, it’s very unlikely you blocked it.

I also wrote a small POC here https://gist.github.com/Calyhre/67337024ece3762cbc3c9e4956b0e3d4

If you are using Plausible 3.0.0 until 3.2.0 included, you should upgrade ASAP, and rotate everything

Sloup in c/programmer_humor@programming.dev
Electron apps in c/programmer_humor@programming.dev
French PM may scrap two public holidays to reduce country’s crippling debt in c/world@lemmy.world