pentester.land· Nov 22, 2022· by Jamie McClymont (@JJJollyjim), Emily Trau (@emilyposting_)💰 Bounty: 10,000🔍 CVE-2022-41924

CVE-2022-41924 - RCE in Tailscale, DNS Rebinding, and You

Target Program: Tailscale

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#RCE#DNS rebinding#Information disclosure#CVE-2022-41924