NetSight
IP …
high7.8

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename.

Impact

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename.

Affected products

VendorProductAffected versions
FreecadwebFreecad
Version 0.19
DebianDebian Linux
Versions 9.0, 10.0, 11.0

Weakness classification

CWE-78

References