{"id":"CVE-2022-27811","details":"GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.","modified":"2026-08-12T03:51:14.234738101Z","published":"2022-03-24T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27811.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27811.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27811"},{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/ocrfeeder/-/issues/20"},{"type":"FIX","url":"https://gitlab.gnome.org/GNOME/ocrfeeder/-/commit/5286120c8bc8b7ba74e0f9b19b5262b509f38cee"},{"type":"FIX","url":"https://gitlab.gnome.org/GNOME/ocrfeeder/-/merge_requests/13"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/ocrfeeder","events":[{"introduced":"0"},{"fixed":"20811c666c4af2f0a75e3caa5b21722fbeb8d918"},{"fixed":"5286120c8bc8b7ba74e0f9b19b5262b509f38cee"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:ocrfeeder:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.8.4"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["0.8.3","release_0.8.1","release_0.8","release_0.7.11","release_0.7.10","release_0.7.9","release_0.7.8","release_0.7.7","release_0.7.6","release_0.7.5","release_0.7.4","release_0.7.3","release_0.7.2","release_0.7.1a","release_0.7.1","release_0.7","release_0.6.6","release_0.6.5","release_0.6.1","release_0.6","release_0.5","release_0.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27811.json"}}],"schema_version":"1.9.0"}