Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
Vulnerability Description
Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes (eg. `$HOME/*`), but a regression was introduced when a configuration option for this behavior was implemented. Only Tauri applications using wildcard scopes in the `fs` endpoint are affected. The regression has been patched on version 1.4.1.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
授权机制不恰当
Vulnerability Title
Tauri 授权问题漏洞
Vulnerability Description
Tauri是Tauri开源的一个使用 Web 前端构建更小、更快、更安全的桌面应用程序。 Tauri 1.4.0版本存在授权问题漏洞，该漏洞源于包含对 Unix 上点文件的文件系统范围检查的回归。
CVSS Information
N/A
Vulnerability Type
N/A