libzypp-plugin-appdata Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/libzypp-plugin-appdata/ Wed, 22 Feb 2023 14:02:24 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png libzypp-plugin-appdata Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/libzypp-plugin-appdata/ 32 32 CVE-2023-22643 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-22643/ Wed, 22 Feb 2023 14:02:24 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-22643 An Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server […]

The post CVE-2023-22643 appeared first on CVE Vulnerability.

]]> An Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.

The post CVE-2023-22643 appeared first on CVE Vulnerability.

]]>