| Package | Affected versions | Patched versions |
|---|---|---|
| gajim | = 0.1= 0.10= 0.10.1= 0.11= 0.11.1= 0.11.2= 0.11.3= 0.11.4= 0.12= 0.12.1= 0.12.2= 0.12.3= 0.12.4= 0.12.5= 0.13= 0.13.1= 0.13.2= 0.13.3= 0.13.4= 0.14= 0.14.1= 0.14.2= 0.14.3≤ 0.14.4 |
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free