CVE-2021-36753

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

barberousse (>=0.1.0 <=0.1.6), borrowing_exerci (>=0.1.0 <=0.4.51) +18 more potentially affected by CVE-2021-36753 via bat (>=0.12.1 <=0.17.1)

bat CARGO version =0.12.1, =0.1.0, =0.1.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.0.2, =0.16.0, =0.16.0, =0.1.0, =0.5.2, =0.12.0, =0.11.1, =0.12.0, =0.11.0, =0.12.1 and more Source cves: CVE-2021-36753 Source advisory: OSV:GHSA-P24J-H477-76Q3...

CVE-2021-36753

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

CVE-2021-36753

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

CVE-2021-36753

CVE-2021-36753 affects sharkdp BAT prior to 0.18.2. The vulnerability arises because BAT may execute less.exe from the current working directory (an uncontrolled search path element ). This can lead to unintended code execution with local access. Affected component: BAT (sharkdp) prior to 0.18.2;...

barberousse (>=0.1.0 <=0.1.6), borrowing_exerci (>=0.1.0 <=0.4.51) +18 more potentially affected by CVE-2021-36753 via bat (>=0.12.1 <=0.17.1)

bat CARGO version =0.12.1, =0.1.0, =0.1.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.0.2, =0.16.0, =0.16.0, =0.1.0, =0.5.2, =0.12.0, =0.11.1, =0.12.0, =0.11.0, =0.12.1 and more Source cves: CVE-2021-36753 Source advisory: OSV:RUSTSEC-2021-0106...