Weakness Name | Source | |
---|---|---|
Improper Neutralization of Special Elements used in a Command ('Command Injection') The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
Metrics | Score | Severity | CVSS Vector | Source |
---|---|---|---|---|
V2 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C | [email protected] |
Apache>>Openoffice >> Version To (excluding) 4.1.1
Libreoffice>>Libreoffice >> Version To (excluding) 4.2.6
Libreoffice>>Libreoffice >> Version From (including) 4.3.0 To (excluding) 4.3.1