CVE-2023-47104

2023-10-3000:00:00

mitre

www.cve.org

tinyfiledialogs security cve-2023-47104 shell metacharacters incomplete fix.

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign) in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters.