[ https://issues.apache.org/jira/browse/CLOUDSTACK-9141?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15057503#comment-15057503 ]
ASF GitHub Bot commented on CLOUDSTACK-9141: -------------------------------------------- Github user wido closed the pull request at: https://github.com/apache/cloudstack/pull/1220 > Userdata is not validated for valid base64 > ------------------------------------------ > > Key: CLOUDSTACK-9141 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9141 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: API > Affects Versions: 4.6.0, 4.7.0 > Reporter: Wido den Hollander > > Currently the userdata passed to "deployvirtualmachine" is not verified if it > is valid base64. > It is passed all the way down the the VR without validating if it is correct > base64. > We simple check if it is valid should be done in the management server before > attempting a deployment. -- This message was sent by Atlassian JIRA (v6.3.4#6332)