Shell command injection in https://partner.steamgames.com/bundles/savestore/ via overwriting asset_path_identifier
Critical
V
Valve
Submitted None
Team Summary
Official summary from Valve
Insufficient validation of parameters allowed injecting shell metacharacters into values used to construct a Bash command.
Actions:
Reported by
lolcanyouexplainagainpleaselol
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
OS Command Injection