CVE-2023-35931
Shescape potential environment variable exposure on Windows with CMD
Résumé
Shescape potential environment variable exposure on Windows with CMD
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com