Debian/unadf: high 8.8
The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.
Action: Upgrade unadf to 0.7.11a-5+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.11a-5+deb12u1 | - |
Fixed versions
| 0.7.11a-5+deb12u1 |
Sources
published · modified · JSON