Description
sharkdp BAT before 0.18.2 executes less.exe from the current working directory.
References
https://github.com/sharkdp/bat/commit/bf2b2df9c9e218e35e5a38ce3d03cffb7c363956
PatchThird Party Advisory
https://github.com/sharkdp/bat/pull/1724
PatchThird Party Advisory
https://github.com/sharkdp/bat/releases/tag/v0.18.2
Release NotesThird Party Advisory
https://vuln.ryotak.me/advisories/53
Third Party Advisory
CVSS impact metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 · High
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Analyzed
Published
2021-07-15T20:15:11.440
3 years agoLast modified
2021-08-17T15:35:24.257
3 years ago