critical9.8
CVE-2023-24205
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw…
Impact
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clash Project | Clash | Version 0.20.12 |