← Back to CVE List

CVE-2023-27985

Published: 2023-03-09T06:15Z
Last Modified: 2025-03-05T17:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90 > MITRE Terms of Use apply – see LICENSE‑MITRE.txt