CVE-2023-22671 Command injection in n/a
Attackers can execute arbitrary commands via untrusted input in Ghidra's launch script, requiring a patch to secure the application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-22671?
CVE-2023-22671 is a critical command injection vulnerability in n/a, published on 6 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.
Weakness: CWE-77
Which versions are affected by CVE-2023-22671?
It affects 1 product.
Products include Nsa Ghidra.
How do I fix CVE-2023-22671?
No fix has been published for CVE-2023-22671 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-22671 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-22671 exists.
Other vulnerabilities in n/a
- CVE-2019-16941 XML external entity in n/a
- CVE-2019-13625 XML external entity in n/a
- CVE-2026-4946 NSA Ghidra Auto-Analysis Annotation Command Execution
- CVE-2026-49498 Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username
- CVE-2026-52754 Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule
Sources
Also known as GHSA-9rmx-2mjp-5w4j.