Описание
service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:service_project:service:-:*:*:*:*:go:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 23%
0.00306
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-426
Связанные уязвимости
CVSS3: 7.8
ubuntu
больше 4 лет назад
service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others.
CVSS3: 7.8
debian
больше 4 лет назад
service_windows.go in the kardianos service package for Go omits quoti ...
CVSS3: 7.8
github
больше 4 лет назад
Disputed: OS Command injection in github.com/kardianos/service
EPSS
Процентиль: 23%
0.00306
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-426