Dismissed
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse dismissed
Yelp: arbitrary file read
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Affected products
yelp
- *
- <42.2-8
yelp-xsl
- *
Matching in nixpkgs
pkgs.yelp-xsl
Yelp's universal stylesheets for Mallard and DocBook
Package maintainers
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>
-
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
-
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@domenkozar Domen Kozar <domen@dev.si>