[MNEMONIC-734] Unsanitized input from a command line argument in run.py

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.17.0
• Fix Version/s: 0.17.0
• Component/s: Tools
• Assignee: Zhen Li
• Reporter: Gordon King
• Due: 23/Mar/22
• Created: 08/Mar/22 05:18
• Updated: 12/Mar/22 06:01
• Resolved: 11/Mar/22 06:26

Description

There are 3 security vulnerabilities identified in script run.py, which is about command argument of subprocess.check_call(...). It needs to be sanitized before passing to this call.

Issue Links

• links to: GitHub Pull Request #278