| Package | Affected versions | Patched versions |
|---|---|---|
| kiwi | ≤ 3.74.1 | |
| suse studio onsite | = 1.1 |
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free