Vulnerability in Fraunhofer Fit Bscw

CVE-2002-0094

config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.

EPSS: 0.033 (87.2th percentile) — read the EPSS interpretation.

Affected products

Fraunhofer_fit Bscw — versions 3.4, 4.0
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)