Vulnerabilities > Sensible Utils Project > Sensible Utils > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-12-11 | CVE-2017-17512 | Injection vulnerability in Sensible-Utils Project Sensible-Utils sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument. | 6.8 |