Description (CNA)
super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| 4ra1n / super-xray | affected < 0.2-beta |
CWE
CWE-94
References
- https://github.com/4ra1n/super-xray/security/advisories/GHSA-732j-763p-cvqg
- https://github.com/4ra1n/super-xray/releases/tag/0.2-beta
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.