Liferea vulnerabilities
We track 1 vulnerability in Liferea products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Liferea vulnerabilities
- 9.8 Critical severity
liferea: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item