Description (CNA)
theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AsfhtgkDavid / theshit | affected < 0.2.0 |
CWE
CWE-273, CWE-269, CWE-250
References
- https://github.com/AsfhtgkDavid/theshit/security/advisories/GHSA-2j3p-gqw5-g59j
- https://github.com/AsfhtgkDavid/theshit/commit/5293957b119e55212dce2c6dcbaf1d7eb794602a
ADP enrichment
No English description supplied.
No references supplied.