Episode Details

This story was originally published on HackerNoon at: https://hackernoon.com/rust-cve-2024-24576-explained-what-was-this-security-advisory.
The severity of this vulnerability was critical if you were invoking batch files on Windows with untrusted arguments.
Check more stories related to programming at: https://hackernoon.com/c/programming. You can also check exclusive content about #rust, #rustlang, #rust-security, #rust-security-advisory, #rust-cve202424576, #rust-security-response-wg, #rust-issues, #rust-bug, and more.

This story was written by: @Rust. Learn more about this writer by checking @Rust's about page, and for more stories, please visit hackernoon.com.

The Rust Security Response WG was notified that the Rust standard library did not properly escape arguments when invoking batch files (with the bat and cmd extensions) on Windows using the Command API.