CVE-2022-41089: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

December 14, 2022

.NET Framework Remote Code Execution Vulnerability.

References

github.com/advisories/GHSA-2c7v-qcjp-4mg2
github.com/dotnet/announcements/issues/242
github.com/dotnet/wpf/security/advisories/GHSA-2c7v-qcjp-4mg2
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41089

Detect and mitigate CVE-2022-41089 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →