PT-2021-23100
CVE-2021-41116
·
تاريخ النشر
2021-10-05
·
تاريخ التحديث
2026-09-30
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Composer versions prior to 1.10.23
Composer versions prior to 2.1.9
Description
The issue affects Windows users running Composer to install untrusted dependencies, subjecting them to command injection. Other operating systems and Windows Subsystem for Linux (WSL) are not affected.
Recommendations
For versions prior to 1.10.23, upgrade to version 1.10.23 or later.
For versions prior to 2.1.9, upgrade to version 2.1.9 or later.
As a temporary workaround, consider avoiding the installation of untrusted dependencies until a patch is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾