CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.

• CWE-78

• https://lists.debian.org/debian-lts-announce/2022/12/msg00040.htmlMailing List, Third Party Advisory
• https://sourceforge.net/p/ctags/code/HEAD/tree/tags/ctags-5.8/sort.c#l56Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00040.htmlMailing List, Third Party Advisory
• https://sourceforge.net/p/ctags/code/HEAD/tree/tags/ctags-5.8/sort.c#l56Exploit, Third Party Advisory

Published

Dec 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45144Algoo Tracim before 4.4.2 allows XSS via HTML file upload.6.1
• CVE-2022-45145egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary…9.8
• CVE-2022-45146An issue was discovered in the FIPS Java API of Bouncy Castl…5.5
• CVE-2022-45147A vulnerability has been identified in SIMATIC PCS neo V4.0 …8.5
• CVE-2022-45148Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-45149A vulnerability was found in Moodle which exists due to insu…5.4
• CVE-2022-45150A reflected cross-site scripting vulnerability was discovere…6.1
• CVE-2022-45151The stored-XSS vulnerability was discovered in Moodle which …5.4
• CVE-2022-45152A blind Server-Side Request Forgery (SSRF) vulnerability was…9.1
• CVE-2022-45153An Incorrect Default Permissions vulnerability in saphanaboo…7.8
• CVE-2022-45154A Cleartext Storage of Sensitive Information vulnerability i…5.5
• CVE-2022-45155An Improper Handling of Exceptional Conditions vulnerability…5.5