Ninka is prone to a security-bypass vulnerability.
An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks.
Ninka 1.3.0 and prior are vulnerable.
Information
References:
- CVE-2017-7239: ninka license identification tool: insufficient escaping of exter (Dirk-Willem van Gulik)
- Ninka Homepage (Ninka)