Post #2212688

TIL in bash, [[ $x -gt 0 ]] gives any attacker that controls $x remote code execution as if you just did eval $ x='foo[`echo pwned >&2`]'; [[ "$x" -gt 0 ]] pwned in even worse news, this isn't a CVE it's a feature i mean it's definitely not a feature but it's a feature apparently https://unix.stackexchange.com/questions/172103/security-implications-of-using-unsanitized-data-in-shell-arithmetic-evaluation