CVE-2020-17368

Name of the Vulnerable Software and Affected Versions: Firejail versions 0.9.62 and earlier

Description: The issue is related to the mishandling of shell metacharacters during the use of the --output or --output-stderr option, which may lead to command injection. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations: For Firejail versions 0.9.62 and earlier, consider disabling the use of the --output and --output-stderr options until a patch is available. Restrict access to the vulnerable functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.