Lucene search

K
osvGoogleOSV:GHSA-QH2H-CHJ9-JFFQ
HistoryJun 08, 2018 - 12:43 p.m.

Growl before 1.10.0 vulnerable to Command Injection

2018-06-0812:43:43
Google
osv.dev
12

EPSS

0.005

Percentile

77.0%

Affected versions of growl do not properly sanitize input prior to passing it into a shell command, allowing for arbitrary command execution.

Recommendation

Update to version 1.10.0 or later.