CyberzSOC

This flaw allows command injection attacks via crafted batch file executions with untrusted arguments. It is recommended updating as soon as possible, prioritising assets running code (or one of its dependencies) which executes batch files with untrusted arguments [1]. The vulnerability, identified as CVE-2024-24576 with a CVSS score of 10, stems from improper sanitisation of command-line arguments which could be manipulated to execute arbitrary commands. This issue affects all Rust versions prior to 1.77.2 on Windows if a program’s code or one of its dependencies invokes and executes batch files with untrusted arguments [1]. All Rust versions before 1.77.2 on Windows are affected [2].