Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39819
HistoryMar 18, 2023 - 1:15 a.m.

Command Injection

2023-03-1801:15:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
command injection
update.c
attacker manipulation
os command injection
liferea

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

62.5%

liferea is vulnerable to Command Injection. The vulnerability exists in the update_job_run function of update.c, which allows an attacker to manipulate of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

62.5%