Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set_prompt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
fish 输入验证错误漏洞
Vulnerability Description
Fish-shell（也称Fish）是挪威软件开发者Axel Liljencrantz所研发的一个专注于交互应用、易用性和友好的用户体验的Unix shell（命令行界面），它支持语法高亮显示、高级的Tab键自动补完等功能。 fish (fish-shell) 2.1.1之前的2.0.0版本中的fish_config存在输入验证错误漏洞。远程攻击者可利用该漏洞在系统上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A