Sensible-utils Project Sensible-utils vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sensible-utils Project Sensible-utils: 1 record(s), with affected versions and fixes.cpe:2.3:a:sensible-utils_project:sensible-utils
CVE-2017-17512
High · 8.8
CWE-74 Dec 11, 2017
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.