CVE-2021-3725

Severity CVSS v4.0:
Pending analysis
Type:
CWE-94 Code Injection
Publication date:
30/11/2021
Last modified:
09/08/2022

Description

Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered by pressing Alt-Left and Alt-Right, use functions that unsafely execute eval on directory names. If you cd into a directory with a carefully-crafted name, then press Alt-Left, the system is subject to command injection. Impacted areas: - Functions pop_past and pop_future in dirhistory plugin.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:planetargon:oh_my_zsh:*:*:*:*:*:*:*:* 11-11-2021 (excluding)


References to Advisories, Solutions, and Tools