← All KD5FMU repositories

Play-Audio-Locally

https://github.com/KD5FMU/Play-Audio-Locally · Shell · 2 findings · Review date 2026-07-11

Executive Summary

This is a script file to play audio locally over the AllStar Node

This is a script file to play audio locally over the AllStar Node

Summary Counts

0
Critical Security
1
High Security
0
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
1
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
PLAYLOCAL-001 High Security playaudio_local.sh 5 Unquoted $1 in Asterisk CLI invocation
PLAYLOCAL-002 Medium Bug playaudio_local.sh 5 Placeholder node number left in script

High Security Issues

[PLAYLOCAL-001] Unquoted $1 in Asterisk CLI invocation

playaudio_local.sh : 5

rpt localplay <Your_Node_Number> $1 with unquoted path.

Impact: Shell/CLI injection if argument contains metacharacters.

Medium Issues

[PLAYLOCAL-002] Placeholder node number left in script

playaudio_local.sh : 5

Uses literal <Your_Node_Number> instead of configured variable.

Impact: Script fails if deployed without manual editing.