Описание
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rust-ripgrep | not-affected | package |
Примечания
https://rustsec.org/advisories/RUSTSEC-2021-0071.html
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 4 лет назад
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.
CVSS3: 9.8
nvd
больше 4 лет назад
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.