CVE-2022-45639
OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter....
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.
Références
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web binaryworld.it
- web binaryworld.it