snaggen to Rust · 8 months agoSecurity advisory for the standard library (CVE-2024-24576)blog.rust-lang.orgexternal-linkmessage-square10fedilinkarrow-up150arrow-down11cross-posted to: [email protected][email protected]
arrow-up149arrow-down1external-linkSecurity advisory for the standard library (CVE-2024-24576)blog.rust-lang.orgsnaggen to Rust · 8 months agomessage-square10fedilinkcross-posted to: [email protected][email protected]
minus-squareIch, einfach anders@lemmings.worldlinkfedilinkarrow-up12·edit-28 months agoTl;dr: std::process::Command is vulnerable to shell injection if you invoke cmd.exe or *.{cmd,bat} on Windows.
Tl;dr:
std::process::Command
is vulnerable to shell injection if you invokecmd.exe
or*.{cmd,bat}
on Windows.