RUSTSEC-2021-0105
Relative Path Traversal in git-delta
- Reported
- Issued
- Package
- git-delta (crates.io)
- Type
- Vulnerability
- Categories
- Aliases
- References
- CVSS Score
- 7.8 HIGH
- CVSS Details
-
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- Required
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Patched
-
>=0.8.3
- Affected OSes
-
windows
Description
git-delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.
Advisory available under CC0-1.0 license.