CVE-2022-4515

Name of the Vulnerable Software and Affected Versions Exuberant Ctags (affected versions not specified)

Description A flaw was found in Exuberant Ctags in the way it handles the "-o" option, which specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() function in sort.c calls the system(3) function in an unsafe way. This allows an attacker to execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.