TI-2024-09480 CVE-2024-10224OS command injection in Module::ScanDepsPriority HIGH 67Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by open()ing a "pesky pipe" (such as passing "…CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.08975 · Published 2024-11-19 · Partial fix · 1.38 CWE-78
