Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7wvh-j87j-478f

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set_prompt.

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set_prompt.

EPSS

Процентиль: 85%
0.02481
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 6 лет назад

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set_prompt.

CVSS3: 9.8
nvd
около 6 лет назад

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set_prompt.

CVSS3: 9.8
debian
около 6 лет назад

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to t ...

suse-cvrf
больше 6 лет назад

Security update for fish3

suse-cvrf
больше 6 лет назад

Security update for fish3

EPSS

Процентиль: 85%
0.02481
Низкий