CVE-2022-33127

The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allo...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Ubuntu UBUNTU-CVE-2022-33127 ruby-diffy

Références

advisory github.com
advisory nvd.nist.gov
patch github.com
web github.com