Design/Logic Flaw

2022-02-1412:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.

CPENameOperatorVersion
mac_os_xge10.15
mac_os_xlt10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7 securityupdate2020
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7

Name	Operator	Version
mac_os_x	ge	10.15
mac_os_x	lt	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7 securityupdate2020
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7