fsSize() fix drive sanitation (windows)

2025-12-16 07:18:20 +01:00
parent d3b03e973b
commit c52f9fd07f
6 changed files with 767 additions and 512 deletions
@@ -57,6 +57,11 @@
                    </tr>
                  </thead>
                  <tbody>
+                    <tr>
+                      <th scope="row">5.27.14</th>
+                      <td>2025-12-16</td>
+                      <td><span class="code">fsSize()</span> fix sanitation drive (windows)</td>
+                    </tr>
                    <tr>
                      <th scope="row">5.27.13</th>
                      <td>2025-12-10</td>
@@ -166,11 +166,11 @@
 <body>
  <header class="bg-image-full">
    <div class="top-container">
-      <a href="security.html" class="recommendation">Security advisory:<br>Update to v5.23.7</a>
+      <a href="security.html" class="recommendation">Security advisory:<br>Update to v5.27.14</a>
      <img class="logo" src="assets/logo.png" alt="logo">
      <div class="title">systeminformation</div>
      <div class="subtitle"><span id="typed"></span>&nbsp;</div>
-      <div class="version">New Version: <span id="version">5.27.13</span></div>
+      <div class="version">New Version: <span id="version">5.27.14</span></div>
      <button class="btn btn-light" onclick="location.href='https://github.com/sebhildebrandt/systeminformation'">View on Github <i class=" fab fa-github"></i></button>
    </div>
    <div class="down">
@@ -44,6 +44,21 @@
            <div class="col-12 sectionheader">
              <div class="title">Security Advisories</div>
              <div class="text">
+                <h2>fsSize Command Injection Vulnerability</h2>
+                <p><span class="bold">Affected versions:</span>
+                  &lt; 5.23.14<br>
+                  <span class="bold">Date:</span> 2025-12-16<br>
+                  <span class="bold">CVE indentifier</span> CVE-???
+                </p>
+
+                <h4>Impact</h4>
+                <p>We had an issue that there was a possibility to perform a potential command injection possibility by manipulating Win32_logicaldisk input in <span class="code">fsSize()</span> on windows machines.</p>
+
+                <h4>Patch</h4>
+                <p>Problem was fixed with parameter checking. If you are using version 5, please upgrade to version >= 5.27.14.</p>
+                <hr>
+                <br>
+
                <h2>SSID Command Injection Vulnerability</h2>
                <p><span class="bold">Affected versions:</span>
                  &lt; 5.23.7<br>