Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks.
  • thingsiplay@beehaw.org
    24·
    9 months ago

    But it got a 10/10 on the scoring system by Github.

    The issue isn’t actually too much related to the Rust core language itself, but rather how they handle scripts on Windows platform. So if you don’t have a Windows program that runs Batch scripts, then it doesn’t matter to you. I wonder how common it is to run Batch scripts in Rust?

    • TehPers@beehaw.orgEnglish
      8·
      9 months ago

      if you don’t have a Windows program that runs Batch scripts with untrusted arguments

      This only matters when running the scripts with user inputs passed as arguments to the command, which I can’t imagine being remotely common at all.

    • tatterdemalion
      61·
      9 months ago

      I don’t think my company uses batch scripts anywhere, but if they did, it would probably be in the app installer for Windows or something.