← Back to browse · API

CVE-2023-22671

Severity
CRITICAL
CVSS
9.8
EPSS
0.02885
Risk score
40.21
CISA KEV
No
PoC
No
Published
2023-01-06
Modified
2025-04-07
First seen
2026-08-07
Aliases
EUVD-2023-26800, GHSA-9RMX-2MJP-5W4J
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-26800

Description

Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.

References