Vulnerabilidades de Sensible-utils Project
CVEs publicadas que afetam produtos de Sensible-utils Project: 1 registro(s), com severidade, exploração e correções.
CVE-2017-17512
Alta · 8.8
CWE-74 11/12/2017
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.