2 matches found
rust: rustdoc loads plugins from world writable directory allowing for arbitrary code execution
The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the...
7.8CVSS6.1AI score0.01819EPSS
SaveExploits0References5
DEBIAN-CVE-2018-1000622
The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the...
7.8CVSS7.4AI score0.01819EPSS
SaveExploits0References1
20