Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries.
No PoCs from references.
- https://github.com/Shubhamthakur1997/CICD-Demo
- https://github.com/dcambronero/CloudGuard-ShiftLeft-CICD-AWS
- https://github.com/jaydenaung/CloudGuard-ShiftLeft-CICD-AWS