Threats tagged 'ghsa-3v3v-qqf5-5rqr'

CherryTree versions through 1.7.2 have an OS command injection vulnerability in the CtActions::link_clicked function. This flaw allows attackers to execute arbitrary commands on the victim's system by embedding shell metacharacters in web link URLs. The vulnerability is triggered when the non-default Custom Web Link Clicked Action option is enabled, enabling crafted document links to pass unquoted shell commands to std::system. This results in command execution with the privileges of the user clicking the link.