rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
2b1a5c551d6252ea54bb752199d9467badfb0881
advisory-db/crates/git-delta/RUSTSEC-2021-0105.md
Sergey "Shnatsel" Davidoff 2b1a5c551d Add GHSA alias to RUSTSEC-2021-0105 (#1041)
2021-09-10 16:04:49 +00:00

503 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2021-0105"
package = "git-delta"
date = "2021-07-12"
url = "https://nvd.nist.gov/vuln/detail/CVE-2021-36376"
categories = ["file-disclosure"]
cvss = "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
aliases = ["CVE-2021-36376", "GHSA-5xg3-j2j6-rcx4"]
[affected]
os = ["windows"]
[versions]
patched = [">= 0.8.3"]

Relative Path Traversal in git-delta

git-delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.