CVE-2024-11681

Remote Code Execution in MacPorts PUBLISHED

Description (CNA)

A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror.

Affected (CNA)

Vendor / product	Versions
MacPorts / MacPorts	affected < 2.10.5

CWE

CWE-78

References

https://github.com/google/security-research/security/advisories/GHSA-2j38-pjh8-wfxw

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.