Skip to content
OpenAdvisories

Vendor

MrChuckomo

1 known vulnerabilities.

Products

poddycast 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-32772

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in helper_entries

    Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with malicious characters and execute commands on the client machine. The application does not clean the HTML characters of the podcast informat…

    MrChuckomo poddycast