3 matches found
CVE-2014-2914
fish aka fish-shell 2.0.0 before 2.1.1 does not restrict access to the configuration service aka fishconfig, which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by setprompt...
9.8CVSS7.3AI score0.0319EPSS
SaveExploits0References2
Code injection
fish aka fish-shell 2.0.0 before 2.1.1 does not restrict access to the configuration service aka fishconfig, which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by setprompt...
7.5CVSS8.2AI score0.0319EPSS
SaveExploits0References2Affected Software1
CVE-2014-2914: Improper Input Validation
fish aka fish-shell 2.0.0 before 2.1.1 does not restrict access to the configuration service aka fishconfig, which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by setprompt...
9.8CVSS8AI score0.0319EPSS
SaveExploits0References2
20