CVE:CVE-2020-36457
CNNVD:CNNVD-202108-737
Rust是Mozilla基金会的一款通用、编译型编程语言。
Rust的vertexclique lever存在命令注入漏洞。
solution:Upgrade lever_project lever to a higher version than 0.0.0,0.1.0,0.1.1:alpha1,0.1.1:alpha11,0.1.1:alpha2,0.1.1:alpha3,0.1.1:alpha4,0.1.1:alpha5,0.1.1:alpha7,0.1.1:alpha8,and avoid the version 0.0.0,0.1.0,0.1.1:alpha1,0.1.1:alpha11,0.1.1:alpha2,0.1.1:alpha3,0.1.1:alpha4,0.1.1:alpha5,0.1.1:alpha7,0.1.1:alpha8