egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file.
References
Configurations
History
07 Nov 2023, 03:54
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2022-12-10 16:15
Updated : 2024-02-28 19:51
NVD link : CVE-2022-45145
Mitre link : CVE-2022-45145
CVE.ORG link : CVE-2022-45145
JSON object : View
Products Affected
call-cc
- chicken
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')