PT-2026-116544 · Alexpasmantier · Television
CVSS v3.1
5.3
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
alexpasmantier television versions prior to 0.16.0
Description
A command injection issue exists in the
Entry::output() function within the television/channels/entry.rs file. This occurs when the raw argument is manipulated, allowing an attacker with local access to execute arbitrary commands.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Command Injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Television