Argument Injection Vulnerability in OCaml Batteries Included by OCaml
CVE-2017-17519

8.8HIGH

Key Information:

Vendor

Ocaml Batteries Project

Status
Ocaml Batteries
Vendor
CVE Published:
14 December 2017

What is CVE-2017-17519?

A vulnerability exists in OCaml Batteries Included (version 2.6) where the program does not properly validate strings used in the BROWSER environment variable. This oversight can be exploited by remote attackers, allowing them to perform argument-injection attacks through specially crafted URLs, potentially leading to unauthorized actions or information disclosure.

References

https://security-tracker.debian.org/tracker/CVE-2017-17519
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.