Aller au contenu
Se connecter
6.5 Moyenne

CVE-2025-47906 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain…

Description

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

Produits et versions touchés

Produit Versions touchées Corrigé en
os/exec 1.24 1.24.0 → < 1.24.6 1.24.6
os/exec 1.23 premières → < 1.23.12 1.23.12

Autres CVE de os/exec

Les 3 CVE de os/exec →
CVE-2022-41716 Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows 6.3 Moyenne CVE-2022-30580 Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working… 7.8 Élevée
Suivre cette CVE