medium6.8
CVE-2024-11681
A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror.
Impact
A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macports | Macports | before 2.10.5 |