Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-33127
HistoryJun 23, 2022 - 5:15 p.m.

Spoofing

2022-06-2317:15:00
PRIOn knowledge base
www.prio-n.com
2

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string.

CPENameOperatorVersion
diffyeq3.4.1

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%