CVE-2023-40185mediumCWE-150

Shescape on Windows escaping may be bypassed in threaded context

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.6%

exploitation probability

0.6%top 57% of all CVEs

observed exploitation

nono source reports it

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping (or quoting) for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expected and used shell. This bug has been patched in version 1.7.4.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Affected products

ericcornelissen · shescape

References

https://github.com/ericcornelissen/shescape/commit/0b976dab645abf45ffd85e74a8c6e51ee2f42d63 https://github.com/ericcornelissen/shescape/pull/1142 https://github.com/ericcornelissen/shescape/releases/tag/v1.7.4 https://github.com/ericcornelissen/shescape/security/advisories/GHSA-j55r-787p-m549