In Helix Sync versions prior to 2024.1, a local command... · CVE-2024-0325 · GitHub Advisory Database · GitHub

In Helix Sync versions prior to 2024.1, a local command...

Low severity Unreviewed Published Feb 2, 2024 to the GitHub Advisory Database • Updated Feb 19, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.

References

Published by the National Vulnerability Database

Feb 1, 2024

Published to the GitHub Advisory Database Feb 2, 2024

Last updated Feb 19, 2024

Severity

Low

3.6

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N