Vulnerability · Published Aug 23, 2023 · Assigned by GitHub_M

CVE-2023-40185Shescape on Windows escaping may be bypassed in threaded context

Medium 6.5

In plain English

A medium-severity security flaw in shescape from ericcornelissen. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.7%top 47.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping (or quoting) for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expected and used shell. This bug has been patched in version 1.7.4.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	shescape	1.7.4	GHSA-j55r-787p-m549

Affected products (as reported)

Vendor	Product	Versions
ericcornelissen	shescape	< 1.7.4

Weakness: CWE-150 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

References

https://github.com/ericcornelissen/shescape/security/advisories/GHSA-j55r-787p-m549 x_refsource_CONFIRM
https://github.com/ericcornelissen/shescape/pull/1142 x_refsource_MISC
https://github.com/ericcornelissen/shescape/commit/0b976dab645abf45ffd85e74a8c6e51ee2f42d63 x_refsource_MISC
https://github.com/ericcornelissen/shescape/releases/tag/v1.7.4 x_refsource_MISC