2 matches found
CVE-2014-2914
fish aka fish-shell 2.0.0 before 2.1.1 does not restrict access to the configuration service aka fishconfig, which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by setprompt...
9.8CVSS7.3AI score0.0319EPSS
SaveExploits0References2
Code injection
fish aka fish-shell 2.0.0 before 2.1.1 does not restrict access to the configuration service aka fishconfig, which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by setprompt...
7.5CVSS8.2AI score0.0319EPSS
SaveExploits0References2Affected Software1
20