Threats tagged 'ghsa-8pw3-3g5c-862j'

Jarun nnn versions through 5.3 have an OS command injection vulnerability in the plugins/togglex component. This flaw allows attackers to execute arbitrary commands by placing specially crafted filenames containing shell syntax that are processed unsafely by xargs and sh -c. The vulnerability requires user interaction and local access to invoke togglex with the malicious filenames.