Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks.
  • Meansalladknifehands
    1·
    5 months ago

    As I remember it, the issue wasn’t exclusive to rust, but multiple popular languages had the same issue. Due to Microsoft complexity of the api, requiring the standard library to handle the escaping of the strings arguments, to which even the maintainers say, that they still haven’t found a proper solution.