An issue was discovered in GNU Emacs... CVE-2022-48339

- AV AC AU C I A
发布: 2023-02-20
修订: 2024-11-21

An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息