cve/2023/CVE-2023-22671.md
2024-06-18 02:51:15 +02:00

675 B

CVE-2023-22671

Description

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.

POC

Reference

Github

No PoCs found on GitHub currently.