1 matches found
GHSA-2M8M-JHRM-W6J2 rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution
Summary rclone interpolates remote SFTP paths into PowerShell hash commands. Its quoting helper escapes only ASCII apostrophe, although PowerShell accepts four Unicode smart quotes as single-quote delimiters. An attacker-controlled filename can therefore terminate the intended path literal and...
8CVSS6AI score0.00276EPSS
SaveExploits0References4
20