Vulnerability · Published Nov 30, 2021 · Assigned by @huntrdev

CVE-2021-3725OS Command Injection in ohmyzsh/ohmyzsh

High 7.5

In plain English

A high-severity OS command injection in ohmyzsh/ohmyzsh from ohmyzsh. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 64% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.1%top 35.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered by pressing Alt-Left and Alt-Right, use functions that unsafely execute eval on directory names. If you cd into a directory with a carefully-crafted name, then press Alt-Left, the system is subject to command injection. Impacted areas: - Functions pop_past and pop_future in dirhistory plugin.

Affected products (as reported)

Vendor	Product	Versions
ohmyzsh	ohmyzsh/ohmyzsh	unspecified – before 06fc5fb

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://github.com/ohmyzsh/ohmyzsh/commit/06fc5fb x_refsource_MISC