tocsin

Debian/gajim: unknown

The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.

Action: Upgrade gajim to 0.15-1 or later.

Affected

introducedfixedlast affected
00.15-1-

Fixed versions

0.15-1

Sources

published · modified · JSON