mirror of
https://github.com/godotengine/buildroot.git
synced 2025-12-31 09:48:56 +03:00
Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site. For more details, see: https://sourceforge.net/p/openocd/mailman/message/36188041/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit8fb8dddbf4) Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commita01d75d125) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>