Executive brief
Command injection in github.com/google/fscrypt
Affected products
- Go github.com/google/fscrypt
Junglewise Threat Intelligence
CVE-2022-25328: Command injection in github.com/google/fscrypt
CVE-2022-25328 · Severity: low · CVSS 3.1 · Published 2022-02-26
Technologies: github.com/google/fscrypt (Go). Vendors: Go.
Related threats
- GO-2022-0339 - Possible filesystem space exhaustion by local users in github.com/google/fscrypt
- GO-2022-0340 - User login denial of service in github.com/google/fscrypt
- Google fscrypt denial of service via insufficient metadata validation in PAM module
- Possible privilege escalation via bash completion script
- GO-2020-0027 - Privilege escalation in github.com/google/fscrypt