high7.5
CVE-2021-3934
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command
Impact
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Planetargon | Oh My Zsh | before 2021-11-11 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ohmyzsh/ohmyzsh/commit/6cb41b70a6d04301fd50cd5862ecd705ba226c0e
- https://huntr.dev/bounties/ad2b5c3f-a3ce-4407-94dc-354c723310ce
- https://github.com/ohmyzsh/ohmyzsh/commit/6cb41b70a6d04301fd50cd5862ecd705ba226c0e
- https://huntr.dev/bounties/ad2b5c3f-a3ce-4407-94dc-354c723310ce