Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-48339
HistoryFeb 20, 2023 - 11:15 p.m.

CVE-2022-48339

2023-02-2023:15:00
Alpine Linux Development Team
security.alpinelinux.org
7
gnu emacs
htmlfontify.el
command injection
external input
vulnerability

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.1%

An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchemacs=ย 28.2-r8UNKNOWN