Junglewise Threat Intelligence

CVE-2022-41874: RUSTSEC-2022-0091 - `tauri` filesystem scope partial bypass

CVE-2022-41874 · Severity: low · CVSS 3.1 · Published 2022-09-19

Technologies: tauri (crates.io). Vendors: crates.io.

Executive brief

`tauri` filesystem scope partial bypass

Affected products

crates.io tauri

Related threats

Tauri origin confusion in is_local_url function on Windows and Android
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
RUSTSEC-2022-0088 - `tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope