CVE-2008-3907: Newsbeuter

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

Affected products

• Newsbeuter Newsbeuter: up to and including 1.0; version 0.1.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2008-09-04. Last modified 2026-06-16.