critical9.8
CVE-2022-27811
GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.
Impact
GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnome | Ocrfeeder | before 0.8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262b509f38cee
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262b509f38cee
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20
- https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13