Description
Bottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file.
References
- https://github.com/bottlesdevs/Bottles/issues/2463
- FEDORA-2023-328397d034 vendor-advisory
- FEDORA-2023-cc571303eb vendor-advisory
High · 7.8
CVE-2023-22970
EUVD-2023-27070GHSA-fvv8-mx97-fv82
Bottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file.
Published May 26, 2023 · Updated Jan 15, 2025 · Assigned by mitre