415 matches found
webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
acick (>=0.0.6, <=0.2.0), acick-atcoder (>=0.0.7-alpha.3, <=0.2.0) +257 more potentially affected by CVE-2022-45299 via webbrowser (>=0.1.3, <=0.7.1)
webbrowser CARGO version =0.1.3, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.1, =0.1.0, =0.1.0, =1.0.9, =0.1.0, =0.1.18, =0.21.0, =0.23.1 and more Source cves: CVE-2022-45299 Source advisory: OSV:GHSA-M589-MV4Q-P7RJ...
DEBIAN-CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
Design/Logic Flaw
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
UBUNTU-CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
webbrowser 路径遍历漏洞
webbrowser is a Rust library by the individual developer Amod Malviya for opening URLs in web browsers available on the platform. A security vulnerability exists in rust-lang webbrowser-rs version v0.8.2, which stems from its IpFile parameter that allows an attacker to access arbitrary files via ...
CVE-2022-45299: Improper Limitation of a Pathname to a Restricted Directory
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
CVE-2022-45299
CVE-2022-45299 affects rust-lang/webbrowser-rs v0.8.2. The issue in the IpFile argument allows an attacker to access arbitrary files by supplying a crafted URL. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 9.8 (CRITICAL). Exploitation details are not provided i...
PT-2023-14641 · Unknown · Webbrowser-Rs
Name of the Vulnerable Software and Affected Versions: webbrowser-rs version 0.8.2 Description: An issue in the IpFile argument allows attackers to access arbitrary files via supplying a crafted URL. Recommendations: For version 0.8.2, consider restricting access to the IpFile argument until a...
CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
CVE-2022-45299
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...
The vulnerability of the Windows WebBrowser Control component of the operating system allows a hacker to execute arbitrary code.
The vulnerability of the Windows WebBrowser Control component exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2022-30194
Windows WebBrowser Control Remote Code Execution Vulnerability...
CVE-2022-30194
Windows WebBrowser Control Remote Code Execution Vulnerability...