CVE-2023-34460

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...

Input validation

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...

CVE-2023-34460 Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...

CVE-2023-34460 Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...

CVE-2023-34460

CVE-2023-34460 affects Tauri 1.4.0 and is caused by a regression in the Filesystem (fs) endpoint scope checks for dotfiles on Unix systems, where wildcard scopes could implicitly grant access to dotfiles (e.g., $HOME/*). The regression only impacts applications using wildcard scopes in fs; it has...

CVE-2023-34460 Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...

Tauri 授权问题漏洞

Tauri is a Tauri open source for building smaller, faster, and more secure desktop applications using a web front end. Tauri version 1.4.0 has an authorization issue vulnerability that stems from a regression that includes a file system range check on Unix uppoint files...

GHSA-WMFF-GRCW-JCFM Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Impact The 1.4.0 release includes a regression on the filesystem scope check for dotfiles on Linux and macOS. Previously dotfiles eg. $HOME/.ssh/ were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a configuration option for this behavior was...

Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

Impact The 1.4.0 release includes a regression on the filesystem scope check for dotfiles on Linux and macOS. Previously dotfiles eg. $HOME/.ssh/ were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a configuration option for this behavior was...

PT-2023-5599 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions 1.4.0 Description: The issue is related to a regression in the Filesystem scope check for dotfiles on Unix systems, introduced in the 1.4.0 release. This regression affects Tauri applications using wildcard scopes in the fs...

CVE-2023-31134

Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...

Open redirect

Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...

CVE-2023-31134 Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites

Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...

CVE-2023-31134 Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites

Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...

CVE-2023-31134

The CVE-2023-31134 issue affects Tauri builds where IPC isolation can be bypassed by redirecting an existing window to an external website. This vulnerability exists in specific pre-patch versions: 1.0.0–1.0.9, 1.1.0–1.1.4, and 1.2.0–1.2.5. The attack surface is the IPC layer, granting external s...

CVE-2023-31134 Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites

Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an...

Tauri 输入验证错误漏洞

Tauri is a Tauri open source for building smaller, faster, and more secure desktop applications using a web front end. An input validation error vulnerability exists in Tauri versions 1.0.0 through 1.0.9, 1.1.0 through 1.1.4, and 1.2.0 through 1.2, which stems from the fact that isolation can be...

GHSA-4WM2-CWCF-WWVP Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites

Impact The Tauri IPC is usually strictly isolated from external websites but the isolation can be bypassed by redirecting an existing Tauri window to an external website. This is either possible by an application implementing a feature for users to visit arbitrary websites or due to a bug allowin...

Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites

Impact The Tauri IPC is usually strictly isolated from external websites but the isolation can be bypassed by redirecting an existing Tauri window to an external website. This is either possible by an application implementing a feature for users to visit arbitrary websites or due to a bug allowin...

Tauri 安全漏洞

Tauri is Tauri's open source for building smaller, faster, and more secure desktop applications using a web front end. Tauri version 2.2.1 and earlier versions of a security vulnerability , the vulnerability stems from the parse method does not restrict the name of the "proto" key parsing , which...