← voltar
CVE-2024-58266

CVE-2024-58266

CVSS 3.2 LOWEPSS 0.8%CWE-116
The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
comex · shlex

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://crates.io/crates/shlexhttps://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27https://rustsec.org/advisories/RUSTSEC-2024-0006.html