PT-2023-25389 · Shescape · Shescape

Ericcornelissen · Publicado 2023-06-22 · Atualizado 2023-07-04 · CVE-2023-35931

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Shescape versions prior to 1.7.1

Description An attacker may be able to get read-only access to environment variables. This issue affects users of Shescape on Windows using the Windows Command Prompt, and when using quote/quoteAll or escape/escapeAll with the interpolation option set to true. For example, an attacker can exploit this by using a payload like %PATH% in the shescape.quote() or shescape.escape() functions, allowing them to access the contents of the PATH environment variable.

Recommendations For versions prior to 1.7.1, upgrade to version 1.7.1 to patch the bug. As a temporary workaround, consider removing all instances of % from user input, either before or after using Shescape, to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-526

Identificadores relacionados

CVE-2023-35931

GHSA-3G7P-8QHX-MC8R

Produtos afetados

Shescape

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35931.json · Exploit
• 🔥 https://github.com/ericcornelissen/shescape/security/advisories/GHSA-3g7p-8qhx-mc8r · Exploit
• https://github.com/ericcornelissen/shescape · Nota
• https://github.com/ericcornelissen/shescape/releases/tag/v1.7.1 · Nota
• https://github.com/ericcornelissen/shescape/pull/982 · Correção
• https://github.com/ericcornelissen/shescape/commit/d0fce70f987ac0d8331f93cb45d47e79436173ac · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-35931 · Nota de Segurança
• https://t.me/cvenotify/53021 · Publicação no Telegram
• https://t.me/cvenotify/52977 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-3g7p-8qhx-mc8r · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-35931 · Aviso do Fabricante