Lucene search

K
redhatcveRedhat.comRH:CVE-2018-7440
HistoryMay 14, 2019 - 12:27 p.m.

CVE-2018-7440

2019-05-1412:27:10
redhat.com
access.redhat.com
4

0.019 Low

EPSS

Percentile

88.6%

An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argument. This issue exists because of an incomplete fix for CVE-2018-3836.