CVE-2022-45939

Name of the Vulnerable Software and Affected Versions GNU Emacs versions through 28.2

Description The issue is related to the incorrect neutralization of special elements in the lib-src/etags.c component of the ctags program in the EMACS text editor. This can allow an attacker to execute commands via shell metacharacters in the name of a source-code file. For example, a victim may use the "ctags *" command in a situation where the current working directory has contents that depend on untrusted input.

Recommendations For GNU Emacs versions through 28.2, consider avoiding the use of the "ctags *" command in situations where the current working directory has contents that depend on untrusted input, as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.