OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-23 15:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
5046464393df3e90e1a9fc88d5d69f4ca7cc0a11
advisory-db/crates/bat/RUSTSEC-2021-0106.md
github-actions[bot] ec858f80ef Assigned RUSTSEC-2021-0106 to bat (#1032) 
Co-authored-by: alex <alex@users.noreply.github.com>
2021-09-09 18:41:38 -04:00

513 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2021-0106"
package = "bat"
date = "2021-07-15"
url = "https://nvd.nist.gov/vuln/detail/CVE-2021-36753"
categories = ["code-execution"]
cvss = "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
aliases = ["CVE-2021-36753"]
[affected]
os = ["windows"]
[versions]
patched = [">= 0.18.2"]

Uncontrolled Search Path Element in sharkdp/bat

bat on windows before 0.18.2 executes programs named less.exe from the current working directory. This can lead to unintended code execution.