PT-2022-21702

Name of the Vulnerable Software and Affected Versions Diffy versions prior to 3.4.1 Diffy version 3.4.1 Description The function that calls the diff tool in Diffy does not properly handle double quotes in a filename when run in a Windows environment. This allows attackers to execute arbitrary...

CVE-2022-33127: Undefined Security Weakness

The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string...

Twitter Open Sources 'Diffy' that Automatically Catches Potential Bugs in Code

After, Facebook open sourced Thrift Technology an internally used tool by Facebook in 2007, rival entity Twitter brings Diffy, an internal Twitter service to the world. Yesterday, Twitter introduced "Diffy," an open source tool, acting as a helping hand for the software developers to catch bugs,...