CVE-2021-3934

Description

References

• ohmyzsh/ohmyzsh commit 6cb41b7 · Patch
• huntr.dev/bounties/ad2b5c3f-a3ce-4407-94dc-354c723310ce · Permissions Required

More vulnerabilities in oh my zsh

• CVE-2021-3769CRITICAL 9.8# Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**: these themes use `print -P` on user-supplied st…
• CVE-2021-3727CRITICAL 9.8# Vulnerability in `rand-quote` and `hitokoto` plugins **Description**: the `rand-quote` and `hitokoto` fetch quotes from quotationspage.com…
• CVE-2021-3726CRITICAL 9.8# Vulnerability in `title` function **Description**: the `title` function defined in `lib/termsupport.zsh` uses `print` to set the terminal …
• CVE-2021-3725HIGH 8.8Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered by pressing Alt-Lef…