Beveiligingsadvies

CVE-2024-32653

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-22 22:13:47

Laatst bijgewerkt 2024-08-02 02:13:40

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

jadx is a Dex to Java decompiler. Prior to version 1.5.0, the package name is not filtered before concatenation. This can be exploited to inject arbitrary code into the package name. The vulnerability allows an attacker to execute commands with shell privileges. Version 1.5.0 contains a patch for the vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗