GitHub Advisoryadvisory · crates.io

GHSA-f3fg-5j9p-vchc File exposure in pleaser

LOW Published 2021-08-25 Modified 2023-04-03 Official page ↗
Aliases
CVE-2021-31153
Ecosystem
crates.io
Packages
pleaser
Severity
Low
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200, CWE-668
Reviewed
2021-06-01

Affected packages

• crates.io pleaser: < 0.4.0 → fixed in 0.4.0

Description

pleaser before 0.4.0 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the search_path function, the --check option, or the -d option.

Related

Alias · CVE (1)

  • CVE-2021-31153 please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged… vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References