Unscored CVE-2017-7239 EUVD-2017-16271GHSA-32f9-rqvx-v6wh

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a den…

Published Apr 10, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (process hang) via a crafted filename.

References

https://github.com/dmgerman/ninka/commit/81f185261c8863c5b84344ee31192870be939faf
[oss-security] 20170403 CVE-2017-7239: ninka license identification tool: insufficient escaping of external input [vs] mailing-list
97325 vdb-entry