CVE-2023-24205

2023-02-2300:00:00

mitre

www.cve.org

clash for windows

rce vulnerability

configuration file.

0.004 Low

EPSS

Percentile

73.3%

JSON

Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml).

References

github.com/Fndroid/clash_for_windows_pkg

github.com/Fndroid/clash_for_windows_pkg/issues/3891

0.004 Low

EPSS

Percentile

73.3%

JSON

Related for CVELIST:CVE-2023-24205