CVE-2023-1350

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-13519.8A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknoCVE-2023-13528.1A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on VacciCVE-2023-13536.1A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on VaccinaCVE-2023-13546.1A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified asCVE-2023-13555.5NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.CVE-2023-13566.1Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a userCVE-2023-13579.8A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by thCVE-2023-13589.8A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknCVE-2023-13594.8A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability aCVE-2023-13604.9A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affectCVE-2023-13616.5SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.CVE-2023-13626.1Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.