nnn togglex plugin OS command injection allows command execution
Odd file names can make a file manager run commands for an attacker.
Summary
The togglex plugin in the nnn file manager runs commands when it handles specially named files. An attacker can create such files and run commands as the user, and the same release has local file-overwrite flaws in the pdfread and nuke plugins and in NNN_FIFO handling.
Affected when
- togglex plugin in use
- pdfread or nuke plugin in use
- nnn run with the NNN_FIFO path
What to do
Affects version 5.3 and older. No fixed version is named in the sources, so check that you run a version newer than 5.3 and read the project's published fix.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab) · vulncheck.com (opens in a new tab) · github.com (opens in a new tab) · github.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen