Vulnerabilities > Devscripts Devel Team > Devscripts > 2.13.6

DATE CVE VULNERABILITY TITLE RISK
2017-09-25 CVE-2015-5704 Command Injection vulnerability in multiple products
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
7.2
2017-09-06 CVE-2015-5705 Link Following vulnerability in multiple products
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
network
low complexity
devscripts-devel-team fedoraproject CWE-59
5.0