CVE-2022-27811

Description

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Affected Platforms

Weakness Type

CWE-78

References

• https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262…
• https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20
• https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13
• https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262…
• https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20
• https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13