PoC Index85,092 CVEs with PoCs

CVE-2023-22671

CRITICAL 9.8EPSS 3.0%

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.

CVSS v3.1 NVD
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.97% chance of exploitation in the next 30 days, 87th percentile
Published
2023-01-06
Updated
2025-04-07

Proof-of-concept exploits (1)

References

Related