Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Diffy 安全漏洞
Vulnerability Description
Diffy是Sam Goldstein个人开发者的一种 Ruby 中的简单区分。 Diffy 存在安全漏洞，该漏洞源于在 Windows 环境中运行时，在 Diffy 3.4.1 中调用 diff 工具的函数无法正确处理文件名中的双引号。 这允许攻击者通过精心制作的字符串执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A