tocsin

Debian/netrik: unknown

The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands v

Action: Upgrade netrik to 1.15.3-1.1 or later.

Affected

introducedfixedlast affected
01.15.3-1.1-

Fixed versions

1.15.3-1.1

Sources

published · modified · JSON