Vendors / Freecadweb Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Freecadweb records in CISA KEV No Freecadweb vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to execute arbitrary commands via a crafted FCStd document.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01916 · Published 2022-01-25 · No fix listed CWE-78
Priority LOW 36
Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01111 · Published 2022-01-25 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
0 2 0 0 0
