CVE-2024-10224: Module-ScanDeps Local Command Injection Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-10224 2. Release Date: November 19, 2024 3. Update Date: November 19, 2024 4. Description: Qualys discovered that if unprocessed input is used with library Modules::ScanDeps versions prior to 1.36, a local attacker may execute arbitrary shell commands by opening a "pesky pipe" (e.g., using "commands" as a filename) or by passing an arbitrary string to eval(). 5. CVSS Score: 5.3 (Medium) 6. Affected Versions: From before 0 up to 1.38 7. Affected Platforms: Linux 8. Reference Links: - issue-tracking - vendor-advisory - third-party-advisory 9. CVE Program Update Date: November 19, 2024 10. CVE Program Reference Link: https://lists.debian.org/debian-lts-announce/2024/11/msg00015.html This information helps users understand the vulnerability's details, scope of impact, and how to obtain further information.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-10224: Module-ScanDeps Local Command Injection Vulnerability