Описание
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rust-ripgrep | not-affected | package |
Примечания
https://rustsec.org/advisories/RUSTSEC-2021-0071.html
EPSS
Процентиль: 80%
0.01934
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 5 лет назад
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.
CVSS3: 9.8
nvd
больше 5 лет назад
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag.
CVSS3: 9.8
altlinux
больше 5 лет назад
ALT-PU-2021-4964: package `ripgrep` update to version 13.0.0-alt1
EPSS
Процентиль: 80%
0.01934
Низкий