cve/2023/CVE-2023-22671.md
2024-05-25 21:48:12 +02:00

675 B

CVE-2023-22671

Description

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.

POC

Reference

Github

No PoCs found on GitHub currently.