Midnight Commander
Monthly
An issue was discovered in Midnight Commander through 4.8.26. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable. No vendor patch available.
An issue was discovered in Midnight Commander through 4.8.26. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable. No vendor patch available.