CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers to execute commands by embedding shell metacharacters in web link URLs. When the non-default Custom Web Link Clicked Action option is enabled, attackers can supply crafted documents whose links pass $(...), backticks, or semicolons unquoted to std::system, running commands as the victim on click.

Etkilenen sürümler1 yazılım

Kaynaklar7 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/giuspen/cherrytree/issues/2945 Üçüncü taraf
• vulncheck.com/…s-command-injection-via-custom-web-link-action Üçüncü taraf
• github.com/giuspen/cherrytree Diğer
• github.com/…rytree/blob/v1.7.2/src/ct/ct_actions_others.cc Diğer
• github.com/…cherrytree/blob/v1.7.2/src/ct/ct_misc_utils.cc Diğer

Kayıt geçmişi

1. 29 Eki 2026 00:11Yayımlandı

İlgili açıklar

• 4,7 CVE-2026-118693CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path
• 7,2 CVE-2026-118755Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path
• 8,8 CVE-2026-78674Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution
• 7,8 CVE-2026-118615Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability
• 6,8 CVE-2026-118607Alpine iLX-F511 diagapp Command Injection Vulnerability
• 8,8 CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration