Lucene search
+L

2 matches found

RustSec
RustSec
added 2021/07/22 12:0 p.m.19 views

`better-macro` has deliberate RCE to prove a point

better-macro is a fake crate which is "Proving A Point" that proc-macros can run arbitrary code. This is not a particularly novel or interesting observation. It currently opens https://github.com/raycar5/better-macro/blob/master/doc/hi.md which doesn't appear to have any malicious content, but...

9.8CVSS1.3AI score0.02567EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2021/07/22 12:0 p.m.32 views

RUSTSEC-2021-0077 `better-macro` has deliberate RCE to prove a point

better-macro is a fake crate which is "Proving A Point" that proc-macros can run arbitrary code. This is not a particularly novel or interesting observation. It currently opens https://github.com/raycar5/better-macro/blob/master/doc/hi.md which doesn't appear to have any malicious content, but...

9.8CVSS9.4AI score0.02567EPSS
SaveExploits1References3
Rows per page
Query Builder