SA-2023-011 - sudoedit privilege escalation (CVE-2023-22809)
SummaryThe sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entri...