Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.
According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), integrity (I:L) and availability (A:L). What does that mean for this vulnerability? While we cannot rule out the impact to Confidentiality, Integrity, and Availability, the ability to exploit this vulnerability by itself is limited. An attacker would need to combine this with other vulnerabilities to perform an attack.
<a href="https://www.linkedin.com/in/aonanguan/">Aonan Guan</a>, <a href="https://www.linkedin.com/in/gabriellawang/">Lei Wang</a>