television vulnerability

What happened

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".

Affected versions

television: 0.15.0; 0.15.1; 0.15.2; 0.15.3; 0.15.4; 0.15.5; 0.15.6; 0.15.7; 0.15.8; 0.15.9 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.