| Package | Affected versions | Patched versions |
|---|---|---|
| newsbeuter | = 0.7= 0.8= 0.8.1= 0.8.2= 0.9= 0.9.1= 1.0= 1.1= 1.2= 1.3= 2.0= 2.1= 2.2= 2.3= 2.4= 2.5= 2.6= 2.7= 2.8= 2.9 |
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free