CVE-2023-46277
2 advisories.
crates.io/pleaser CVE-2023-46277: high 7.8, EPSS 0.31%
Pleaser privilege escalation vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cgf8-h3fp-h956
- https://nvd.nist.gov/vuln/detail/CVE-2023-46277
- https://github.com/rustsec/advisory-db/pull/1798
- https://gitlab.com/edneville/please
- https://gitlab.com/edneville/please/-/issues/13
- https://gitlab.com/edneville/please/-/merge_requests/69#note_1594254575
- https://rustsec.org/advisories/RUSTSEC-2023-0066.html
CVE-2023-46277 · published · modified · JSON
crates.io/pleaser CVE-2023-46277: medium 4.6, EPSS 0.31%
Vulnerable to privilege escalation using ioctls TIOCSTI and TIOCLINUX
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: RUSTSEC-2023-0066
- https://crates.io/crates/pleaser
- https://rustsec.org/advisories/RUSTSEC-2023-0066.html
- https://gitlab.com/edneville/please/-/issues/13
CVE-2023-46277 · published · modified · JSON