Ghidra Security Vulnerabilities - 2023

cve

CVE-2023-22671

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.

9.8CVSS

9.6AI Score

0.002EPSS

2023-01-06 07:15 AM