Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Koernepr

#30634of 53,630
8.6Total CVSS
Vulnerabilities · 1
PT-2020-14242
8.6
2020-09-02
Miller · Miller · CVE-2020-15167
**Name of the Vulnerable Software and Affected Versions** Miller versions 5.9.0 **Description** The issue allows an attacker to execute arbitrary code by placing a malicious `.mlrrc` file in the working directory, leveraging the configuration file support introduced in version 5.9.0. A fix is ready and will be released. **Recommendations** For Miller version 5.9.0, update to version 5.9.1 once it is released to resolve the issue. As a temporary workaround, consider avoiding the use of the configuration file support or restricting access to the working directory to minimize the risk of exploitation.