CVE-2018-1000622

High

Description

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

SeverityHigh

CVSS7.8

Exploit probability—

Product

Rust

PublishedJul 9, 2018

First seenJul 9, 2018

How to fix

Vendor advisories

security.gentoo.org/glsa/201812-11

Affected products

Product	Affected versions	Fixed in
rust-lang rust	0.8 ≤ v ≤ 1.27.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.