OpenSSL CVE-2022-1292 OS Command Injection Vulnerability
Description
OpenSSL c_rehash script fails to sanitize shell metacharacters, enabling arbitrary command execution on systems where it runs automatically, including Debian Linux 9-11; fixed in OpenSSL 1.0.2ze, 1.1.1o, 3.0.3.
Affected Applications
OpenSSL