WS-2020-0088

plotter through 0.5.0 is vulnerable to Command Injection. The package fails to sanitize plot titles, which may allow attackers to execute arbitrary code in the system if the title value is supplied by a user...

WS-2020-0087

gnuplot through 0.3.1 is vulnerable to Command Injection. The package fails to sanitize plot titles, which may allow attackers to execute arbitrary code in the system if the title value is supplied by a user...

PT-2020-21236

Name of the Vulnerable Software and Affected Versions gnuplot versions affected versions not specified Description The issue concerns a command injection problem where the package fails to properly sanitize plot titles. This could allow attackers to execute arbitrary code on the system if the tit...

Command Injection

Overview All versions of gnuplot are vulnerable to Command Injection. The package fails to sanitize plot titles, which may allow attackers to execute arbitrary code in the system if the title value is supplied by a user. The following proof-of-concept creates a testing file in the current...