CVE-2023-22970

Description

Bottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file.

Affected Platforms

Weakness Type

NVD-CWE-noinfo

References

• https://github.com/bottlesdevs/Bottles/issues/2463
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://github.com/bottlesdevs/Bottles/issues/2463
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…