CNNVD-202508-2366 Information

CNNVD ID

CNNVD-202508-2366

CVE-2025-9176

  • CNNVD Published: 2025-08-20

Description (Chinese)

Shell Script Compiler是Md Jahidul Hamid个人开发者的一个Shell脚本编译器。 Shell Script Compiler 4.0.3及之前版本存在安全漏洞,该漏洞源于环境变量处理不当,可能导致os命令注入。

Description (English)

Shell Script Compiler is a Shell script compiler for the personal developer of Md Jahidul Hamid. Shell Script Company 4.0.3 and previous versions had a security loophole, which stemmed from inappropriate handling of environmental variables that could lead to Os command injections.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-20

Last Modified

2026-02-24

References

https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01 https://vuldb.com/?submit.630744 https://vuldb.com/?id.320557 https://vuldb.com/?ctiid.320557 https://nvd.nist.gov/vuln/detail/CVE-2025-9176

Share on: