Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nim 参数注入漏洞
Vulnerability Description
Nim 1.2.4版本中存在安全漏洞,该漏洞源于程序没有正确处理发往browsers.openDefaultBrowser的参数。攻击者可利用该漏洞执行命令。
CVSS Information
N/A
Vulnerability Type
N/A