Lucene search
Veracode Vulnerability DatabaseVERACODE:32690HistoryOct 22, 2021 - 5:30 a.m.
Arbitrary Command Execution
2021-10-2205:30:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.003 Low
EPSS
Percentile
69.9%
qutebrowser is vulnerable to arbitrary command execution. An attacker is able to execute commands such as :spawn or :debug-pyeval on the host OS via a specially crafted URL leading to argument injection. The vulnerability exists on windows installations where qutebrowser is registered as a URL handler.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qutebrowser | le | 2.3.1 | |
| qutebrowser | le | 2.3.1 |
Related
osv
osv
Arbitrary command execution on Windows via qutebrowserurl: URL handler
2021-10-22 16:20:10
PYSEC-2021-382
2021-10-21 18:15:00
CVE-2021-41146
2021-10-21 18:15:10
github
github
Arbitrary command execution on Windows via qutebrowserurl: URL handler
2021-10-22 16:20:10
ubuntucve
ubuntucve
CVE-2021-41146
2021-10-21 00:00:00
cnvd
cnvd
qutebrowser has an unspecified vulnerability (CNVD-2021-100609)
2021-10-25 00:00:00
prion
prion
Code injection
2021-10-21 18:15:00
cvelist
cvelist
CVE-2021-41146 Arbitrary command execution on Windows in qutebrowser
2021-10-21 17:35:10
debiancve
debiancve
CVE-2021-41146
2021-10-21 18:15:10
cve
cve
CVE-2021-41146
2021-10-21 18:15:10
alpinelinux
alpinelinux
CVE-2021-41146
2021-10-21 18:15:00
nvd
nvd
CVE-2021-41146
2021-10-21 18:15:10