snaggen@programming.dev to Rust@programming.dev · 1 year agoSecurity advisory for the standard library (CVE-2024-24576)blog.rust-lang.orgexternal-linkmessage-square10linkfedilinkarrow-up150arrow-down11cross-posted to: security@lemmy.mltechnology@lemmy.world
arrow-up149arrow-down1external-linkSecurity advisory for the standard library (CVE-2024-24576)blog.rust-lang.orgsnaggen@programming.dev to Rust@programming.dev · 1 year agomessage-square10linkfedilinkcross-posted to: security@lemmy.mltechnology@lemmy.world
minus-squareIch, einfach anderslinkfedilinkarrow-up12·edit-21 year agoTl;dr: std::process::Command is vulnerable to shell injection if you invoke cmd.exe or *.{cmd,bat} on Windows.
Tl;dr:
std::process::Commandis vulnerable to shell injection if you invokecmd.exeor*.{cmd,bat}on Windows.