CVE-2021-31153

LOW3.3EPSS 0.05%

File exposure in pleaser

發布日:2021/8/25修改日:2026/4/28

描述

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the search_path function, the --check option, or the -d option.

受影響套件(3)

crates.io/pleaserfrom 0, < 0.4.0
crates.io/pleaser>= 0.0.0-0, < 0.4.0
Debian/rust-pleaserfrom 0, < 0.4.1-1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	LOW3.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

參考連結(6)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-31153
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2021-31153
WEBhttps://crates.io/crates/pleaser
WEBhttps://gitlab.com/edneville/please/-/tree/master/src/bin
WEBhttps://rustsec.org/advisories/RUSTSEC-2021-0104.html
WEBhttp://www.openwall.com/lists/oss-security/2021/05/18/1