Command Execution Vulnerability in gix-transport for Rust
CVE-2023-53158
Currently unrated
What is CVE-2023-53158?
The gix-transport crate prior to version 0.36.1 for Rust contains a vulnerability that allows attackers to execute arbitrary commands. This is achieved through the improper handling of the command syntax, specifically with the use of 'gix clone ssh://-oProxyCommand=open$IFS'. This vulnerability presents a significant risk to applications utilizing gix-transport, enabling potential unauthorized command execution in vulnerable environments.