CVE-2023-22671 (published 2023-01-06T00:00:00)
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a