CVE-2017-7239

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service process hang via a crafted filename...

CVE-2017-7239

CVE-2017-7239 affects Ninka before 1.3.2. A crafted filename can allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a DoS (process hang). The NVD notes a high/critical impact profile (CVSS v2 base 7.5, v3 base 9.8). Remediation suggested b...