CVE-2017-17522

CVE-2017-17522 affects Lib/webbrowser.py in Python up to 3.6.3, where strings are not validated before launching the program named in the BROWSER env var, potentially enabling argument-injection via a crafted URL. Nessus notes exploitation is considered impossible due to subprocess.Popen with she...