Description
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.
Critical · 9.8
CVE-2023-22671
EUVD-2023-26800GHSA-9rmx-2mjp-5w4j
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injecti…
Published Jan 6, 2023 · Updated Apr 7, 2025 · Assigned by mitre