Description (CNA)
GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262b509f38cee
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20
ADP enrichment
No English description supplied.