Vulnerabilities > CVE-2023-40185 - Unspecified vulnerability in Shescape Project Shescape

CVSS 8.6 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

shescape-project

NVD

Published: 2023-08-23

Updated: 2024-11-21

Summary

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping (or quoting) for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expected and used shell. This bug has been patched in version 1.7.4.

Vulnerable Configurations

Part	Description	Count
Application	Shescape_Project Shescape Project Shescape 0.1.0 Shescape Project Shescape 0.2.0 Shescape Project Shescape 0.2.1 Shescape Project Shescape 0.3.0 Shescape Project Shescape 0.3.1 Shescape Project Shescape 0.4.0 Shescape Project Shescape 0.4.1 Shescape Project Shescape 1.0.0 Shescape Project Shescape 1.1.0 Shescape Project Shescape 1.1.1 Shescape Project Shescape 1.1.2 Shescape Project Shescape 1.1.3 Shescape Project Shescape 1.2.0 Shescape Project Shescape 1.2.1 Shescape Project Shescape 1.3.0 Shescape Project Shescape 1.3.1 Shescape Project Shescape 1.3.2 Shescape Project Shescape 1.3.3 Shescape Project Shescape 1.4.0 Shescape Project Shescape 1.5.0 Shescape Project Shescape 1.5.1 Shescape Project Shescape 1.5.2 Shescape Project Shescape 1.5.3 Shescape Project Shescape 1.5.4 Shescape Project Shescape 1.5.5 Shescape Project Shescape 1.5.6 Shescape Project Shescape 1.5.7 Shescape Project Shescape 1.5.8 Shescape Project Shescape 1.5.9 Shescape Project Shescape 1.5.10 Shescape Project Shescape 1.6.0 Shescape Project Shescape 1.6.1 Shescape Project Shescape 1.6.2 Shescape Project Shescape 1.6.3 Shescape Project Shescape 1.6.4 Shescape Project Shescape 1.6.5 Shescape Project Shescape 1.6.6 Shescape Project Shescape 1.6.7 Shescape Project Shescape 1.7.0 Shescape Project Shescape 1.7.1 Shescape Project Shescape 1.7.2 Shescape Project Shescape 1.7.3	42
OS	Microsoft Microsoft Windows -	1

Summary

Vulnerable Configurations

References