OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 16:24:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add rustsec advisory for GHSA-p24j-h477-76q3 (#1017)

Browse Source 
* Add rustsec advisory for GHSA-p24j-h477-76q3

* Update crates/bat/RUSTSEC-0000-0000.md

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>

* Update RUSTSEC-0000-0000.md

Capitalize `windows` to conform with https://docs.rs/platforms/1.1.0/platforms/target/enum.OS.html

* Update RUSTSEC-0000-0000.md

Add [affected] section

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
This commit is contained in:
Jon Moroney
2021-09-09 15:40:15 -07:00
committed by GitHub
parent fe4e45e52f
commit 10fa105f05
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
crates/bat/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "bat"
date = "2021-07-15"
url = "https://nvd.nist.gov/vuln/detail/CVE-2021-36753"
categories = ["code-execution"]
cvss = "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
aliases = ["CVE-2021-36753"]
[affected]
os = ["windows"]
[versions]
patched = [">= 0.18.2"]
```
# Uncontrolled Search Path Element in sharkdp/bat
bat on windows before 0.18.2 executes programs named less.exe from the current working directory. This can lead to unintended code execution.