66 matches found
CVE-2021-3013
CVE-2021-3013 concerns ripgrep before version 13 on Windows, where the -z/--search-zip or --pre flags allow triggering execution of arbitrary programs from the current working directory. The connected data confirms this as a Windows-specific command-injection-style issue affecting ripgrep’s ZIP-s...
CVE-2021-3013
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...
CVE-2021-3013
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...
PT-2021-18619
Name of the Vulnerable Software and Affected Versions ripgrep versions prior to 13 grep-cli versions prior to 0.1.6 Description The issue allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag. This is possible due to a...
CVE-2021-3013: Undefined Security Weakness
ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--search-zip or --pre flag...
Ripgrep command injection vulnerability
Ripgrep is a line-oriented search tool for applications that recursively searches the current directory for regular expression patterns. Ripgrep suffers from a command injection vulnerability that stems from Ripgrep before 13 that allows an attacker to trigger the execution of an arbitrary progra...