Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-22671
9.8
CRITICALCVSS v3
Published
January 6, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.
NationalSecurityAgency/ghidra
GitHubGhidra is a software reverse engineering (SRE) framework
GitHubGhidra is a software reverse engineering (SRE) framework<= 10.2.2NVD