CVE-2012-2085

Опубликовано: 28 авг. 2012

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*

Версия до 0.14.4 (включая)

cpe:2.3:a:gajim:gajim:0.1:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.10:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.10.1:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.11:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.11.1:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.11.2:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.11.3:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.11.4:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.1:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.2:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.3:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.4:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.5:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.5:alpha1:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.12.5:beta1:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.13:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.13.1:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.13.2:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.13.3:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.13.4:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.14:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.14.1:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.14.2:*:*:*:*:*:*:*

cpe:2.3:a:gajim:gajim:0.14.3:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00636

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2012-2085

ubuntu

больше 13 лет назад

The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.

CVE-2012-2085

debian

больше 13 лет назад

The exec_command function in common/helpers.py in Gajim before 0.15 al ...

GHSA-m3cr-88v9-chgp

github

больше 3 лет назад

The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.

EPSS

Процентиль: 70%

0.00636

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-94