CVE-2023-22643: medium-severity vulnerability in SUSE Linux Enterprise Server for SAP 15-SP3
libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A vulnerability in libzypp-plugin-appdata allows attackers to run arbitrary code with root privileges by injecting malicious commands through repository settings. An attacker can trick a user into using specially crafted repository configuration values to execute commands on the system.
OS command injection vulnerability in libzypp-plugin-appdata stemming from unsafe use of os.system() calls. Attackers can inject shell metacharacters via REPO_ALIAS, REPO_TYPE, or REPO_METADATA_PATH parameters to achieve code execution with root privileges, provided a user is tricked into applying the malicious repository configuration.
In the same product, most dangerous first.