Security Advisory

CVE-2017-12904

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-08-23 14:00:00

Last updated 2024-08-05 18:51:07

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.

← Browse all CVEs View on cve.org ↗