Skip to content

"Open terminal in current directory" poses security breach #382

@disco-fella

Description

@disco-fella

"Open terminal in current directory" command runs cmd.exe using relative path. This approach poses security breach: if current working directory a contains malicious cmd.exe file (hidden one likely), the command runs this malicious file instead of running Windows' cmd.exe in C:\System.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions