← Database

CVE-2023-22671

CRITICAL CVSS: 9.8 Published: 2023-01-06 Modified: 2026-06-17

Description

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.

Affected Platforms

Nsa Ghidra

Weakness Type

CWE-77, CWE-77

References