Libzypp Plugin Appdata

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-07	CVE-2023-22643	OS Command Injection vulnerability in Opensuse Libzypp-Plugin-Appdata An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. local low complexity opensuse CWE-78	7.8