Description
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml).
Critical · 9.8
CVE-2023-24205
EUVD-2023-28264GHSA-rq24-vhfq-6v9x
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the con…
Published Feb 23, 2023 · Updated Mar 12, 2025 · Assigned by mitre