Skip to content
OpenAdvisories

Package · crates.io

webbrowser

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    GHSA-2ph8-5cr8-hr33

    Unix `BROWSER` handling allows browser argument injection

    On Unix platforms handled by `src/unix.rs`, affected versions substitute the caller-supplied URL into the `BROWSER` environment-variable template before tokenizing the resulting string with `split_ascii_whitespace()`. If an application passes an attacker-cont…

    webbrowser crates.io
  • Critical 9.8
    CVE-2022-45299 Public exploit

    webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

    An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL.

    webbrowser rust-webbrowser rust-webbrowser Debian Ubuntu crates.io