9.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.9%
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
github.com/OISF/suricata/commit/b95bbcc66db526ffcc880eb439dbe8abc87a81da
github.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13
www.stamus-networks.com/stamus-labs