Internet Bug Bounty: `std::process::Command` batch files argument escaping could be bypassed with trailing whitespace or periods
The Rust Security Response WG disclosed a vulnerability in the std::process::Command module on Windows, where it incorrectly escaped arguments when invoking batch files. This allowed for bypassing the fix by including trailing whitespace or periods in the batch file name, which are ignored and...