Security Advisory

CVE-2023-22671

9.8
CRITICAL

Vulnerability Description

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.
Published Date January 6, 2023
Official Source NIST NVD Advisory