2 matches found
Improper Neutralization
Soft Serve is vulnerable to improper neutralization. The vulnerability is due to insufficient sanitization of user-supplied inputs and git messages, which allows an attacker to inject malicious ANSI escape sequences and display misleading or fake terminal outputs such as alerts...
4.6CVSS8.4AI score0.00191EPSS
SaveExploits0References3Affected Software1
Sudo get_process_ttyname Privilege Escalation
The vulnerability of the getprocessttyname function in the Sudo system administration program is related to insufficient input data validation. The vulnerability is exploited by creating a symbolic link to the executable file of Sudo, with the file name formatted in a specific way a space followe...
6.9CVSS7.6AI score0.08068EPSS
SaveExploits10References18Affected Software5
20