AZL-66020
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66020.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-66020
- Upstream
- Published
- 2025-07-28T01:15:24Z
- Modified
- 2026-04-21T04:37:45.046066Z
- Summary
- CVE-2023-53158 affecting package rust for versions less than 1.72.0-8
- Details
-
The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.
- References