2 matches found
DEBIAN-CVE-2017-17532
examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
8.8CVSS8.4AI score0.01635EPSS
SaveExploits0References1
UBUNTU-CVE-2017-17532
examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
8.8CVSS7.3AI score0.01635EPSS
SaveExploits0References4
20