CVE-2015-0857

Critical

Published: 06/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.

Risk Assessment

Attackers can exploit this vulnerability to execute code remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update Cool Projects TarDiff to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.