CVE-2022-33127
Assigner: mitre
Published: 2022-06-22T19:31:51
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
descriptions: value: The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string.
problemTypes: descriptions: description: n/a
type: text