VDB

GCVE-110-MAGEIA-2022-73

GCVE-110-MAGEIA-2022-73
Advisory Published
Vulnetix · Advisory published February 18, 2022
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion. (CVE-2021-45444)

Affected Products

VendorProductVersionsPlatforms
Mageiazsh0 (affected), 5.8.1-1.mga8 (unaffected), 5.8.1-1.mga8 (unaffected), 0 (affected)—
Mageiaphpmyadmin0 (affected), 5.2.0-1.mga8 (unaffected)—

Browse GCVE Records

21,084 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›