HIGH7.8
sharkdp BAT before 0.18.2 executes less.exe from the current working directory.
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HReferences
- https://github.com/sharkdp/bat/commit/bf2b2df9c9e218e35e5a38ce3d03cffb7c363956
- https://github.com/sharkdp/bat/pull/1724
- https://github.com/sharkdp/bat/releases/tag/v0.18.2
- https://vuln.ryotak.me/advisories/53
- https://github.com/sharkdp/bat/commit/bf2b2df9c9e218e35e5a38ce3d03cffb7c363956
- https://github.com/sharkdp/bat/pull/1724
- https://github.com/sharkdp/bat/releases/tag/v0.18.2
- https://vuln.ryotak.me/advisories/53