Lucene search

K
cvelistMitreCVELIST:CVE-2022-33127
HistoryJun 22, 2022 - 7:31 p.m.

CVE-2022-33127

2022-06-2219:31:51
mitre
www.cve.org
1

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string.

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%