QwikSec

Security Database

CVE

CWE

Training

CVE-2018-1000622

Published: Jul 9, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

https://groups.google.com/forum/#%21topic/rustlang-security-announcements/4ybxYLTtXuM

x_refsource_CONFIRM

openSUSE-SU-2019:2203

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2019:2244

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2019:2294

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.