CVE-2017-12904

Published August 23rd, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

9.3

HIGH

Affected

PROJECT

Description

Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.

akrennmair/newsbeuter

Newsbeuter is an open-source RSS/Atom feed reader for text terminals.

GitHub

776