~ / search / GHSA-m589-mv4q-p7rj

GHSA-m589-mv4q-p7rj

webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-45299

Packages

EcosystemPackageAffectedFixed in
crates.io webbrowser < 0.8.3 0.8.3

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL.

References

External links from the advisory. They lead to third-party sites.