Summary

In this post, we will understand how to exploit chromedriver package vulnerable to command injection vulnerability (CVE-2023-26156).

Script link

Package chromedriver: possible to do command injection by manipulating the arguments.

Package chromedriver: possible to do command injection by manipulating the arguments. - chromedriver-115.0.1_poc.js

Description