CVE-2013-1436P3LOWCVSS 7.5PoCfixed in xmonad-contrib 0.11.2-1 (bookworm)2013
CVE-2013-1436 [HIGH] CVE-2013-1436: xmonad-contrib - The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote...
The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag.
Scope: local
bookworm: resolved (fixed in 0.11.2-1)
bullseye: resolved (fixed in 0.11.2-1)
forky: resolve
debian