| Package | Affected versions | Patched versions |
|---|---|---|
| weechat | = 0.3.0= 0.3.1= 0.3.1.1= 0.3.2= 0.3.3= 0.3.4= 0.3.6= 0.3.7= 0.3.8= 0.3.9= 0.3.9.1 |
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free