Lucene search

K
osvGoogleOSV:CVE-2021-3726
HistoryNov 30, 2021 - 10:15 a.m.

CVE-2021-3726

2021-11-3010:15:08
Google
osv.dev
2
cve-2021-3726
oh my zsh
user-supplied string
custom user code
unsafe use
vulnerable function

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

61.2%

Vulnerability in title function Description: the title function defined in lib/termsupport.zsh uses print to set the terminal title to a user-supplied string. In Oh My Zsh, this function is always used securely, but custom user code could use the title function in a way that is unsafe.Fixed in: a263cdac.Impacted areas: - title function in lib/termsupport.zsh. - Custom user code using the title function.

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

61.2%

Related for OSV:CVE-2021-3726