CVE-2023-27985
emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Deskt…
Published: 2023-03-09 · CVSS: 7.8 · CVSS 3.1
emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7