Lucene search

K
osvGoogleOSV:CVE-2018-7440
HistoryFeb 23, 2018 - 9:29 p.m.

CVE-2018-7440

2018-02-2321:29:00
Google
osv.dev
5

8.2 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argument. This issue exists because of an incomplete fix for CVE-2018-3836.

8.2 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%