UBUNTU-CVE-2023-1350

A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function updatejobrun of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date /tmp/bad-item-link.txt leads to os command injection. Th...

CVE-2023-1350

CVE-2023-1350 affects Liferea’s update_job_run (src/update.c, Feed Enrichment). The input source parameter can be manipulated to execute OS commands (remote, no user interaction). Documents consistently state this leads to remote code execution and that a patch exists; Gentoo/GLSA and OpenSUSE/SU...

Liferea 操作系统命令注入漏洞

Liferea is a desktop subscription feed reader/news aggregator from the individual developer Lars Windolf. It brings together all the content of a customer's favorite subscriptions into a simple interface that makes it easy to organize and browse subscription feeds. Liferea suffers from an OS...