Vulners
Lucene search
2 matches found
Design/Logic Flaw
examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
6.8CVSS8.4AI score0.0053EPSS
Exploits0References1Affected Software1
CVE-2017-17532
examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
8.8CVSS8.5AI score0.0053EPSS
Exploits0
20