Post #1305471
2026-02-11 12:29 UTC
I read on a Mastodon thread that it isn’t actually an RCE vuln
You have to open a .md in notepad for it to
Replies (2)
-
@surewhynotlem@lemmy.world 2026-02-11 14:47
I HATE that the industry started calling these RCE (specifically "passive" RCE). It really muddies the waters. This isn't a normal RCE where an attacker can remotely connect in and execute code. Those are very serious. This is a passive RCE. Basically code injection from inappropriately parsing a file. And it doesn't need to be remote. You can use a local file.
-
@m4ylame0wecm@lemmy.zip 2026-02-11 13:43
User interaction required was listed on the MSRC source, but that's also where "RCE" came from too.