Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-27985

Опубликовано: 09 мар. 2023
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*
Версия от 28.1 (включая) до 28.2 (включая)

EPSS

Процентиль: 14%
0.00046
Низкий

7.8 High

CVSS3

Дефекты

CWE-78
CWE-78

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 3 года назад

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

CVSS3: 7.8
redhat
почти 3 года назад

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

CVSS3: 7.8
msrc
почти 3 года назад

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

CVSS3: 7.8
debian
почти 3 года назад

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to s ...

CVSS3: 9.8
github
почти 3 года назад

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification.

EPSS

Процентиль: 14%
0.00046
Низкий

7.8 High

CVSS3

Дефекты

CWE-78
CWE-78