CVE-2012-5534

The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in…

published December 3, 2012

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04442 · 91.3th percentile
Published
2012-12-03T21:00Z
EPSS history
Timeline
  • 03 DEC 21:00Z
    The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in…
    cvelistv5