Skip to content
OpenAdvisories

Product · MrChuckomo

poddycast

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in helper_entries

    Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with malicious characters and execute commands on the client machine. The application does not clean the HTML characters of the podcast informat…