← All KD5FMU repositories

New-Weather-script-file-for-Supermon-7-4

https://github.com/KD5FMU/New-Weather-script-file-for-Supermon-7-4 · Shell · 1 finding · Review date 2026-07-11

Executive Summary

To install it you first should backup your existing file

To install it you first should backup your existing file

Summary Counts

0
Critical Security
0
High Security
1
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
0
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
WEATHER-SM74-001 Medium Security weather.sh 59-60 ZIP code argument used in URL without strict validation

Medium Issues

[WEATHER-SM74-001] ZIP code argument used in URL without strict validation

weather.sh : 59-60

ZIP=$1 from CLI with no regex validation before geocoding URLs.

Impact: Malicious cron entry could pass unexpected characters into curl.