CVEvulnerability

CVE-2008-3907

6.8 MEDIUM Published 2008-09-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-09-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

Affected configurations

• newsbeuter newsbeuter (<= 1.0) • newsbeuter newsbeuter 0.1.1 • newsbeuter newsbeuter 0.2 • newsbeuter newsbeuter 0.3 • newsbeuter newsbeuter 0.4 • newsbeuter newsbeuter 0.5 • newsbeuter newsbeuter 0.6 • newsbeuter newsbeuter 0.7 • newsbeuter newsbeuter 0.8 • newsbeuter newsbeuter 0.8.1 • newsbeuter newsbeuter 0.8.2 • newsbeuter newsbeuter 0.9 • newsbeuter newsbeuter 0.9.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References