← All advisories

High severity7.8NVD Advisory· Published Jan 25, 2022· Updated Jun 17, 2026

CVE-2021-45844

CVE-2021-45844

Description

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Freecadweb/Freecad
cpe:2.3:a:freecadweb:freecad:0.19:*:*:*:*:*:*:*
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
FreeCAD/FreeCADdescription
FreeCAD/FreeCADllm-fuzzy
Range: <0.19

Patches

Vulnerability mechanics

References

5

forum.freecadweb.org/viewtopic.phpnvdExploitIssue TrackingMitigationPatchVendor Advisory
tracker.freecad.org/view.phpnvdExploitIssue TrackingPatchVendor Advisory
lists.debian.org/debian-lts-announce/2022/03/msg00004.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2022/08/msg00008.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2022/dsa-5229nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.