Описание
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2022-32278
- https://gitlab.xfce.org/xfce/exo/-/commit/c71c04ff5882b2866a0d8506fb460d4ef796de9f
- https://lists.debian.org/debian-lts-announce/2022/06/msg00018.html
- https://medium.com/@gother.lain
- https://www.debian.org/security/2022/dsa-5164
- https://www.linkedin.com/in/igo0r
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 3 лет назад
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
CVSS3: 8.8
nvd
больше 3 лет назад
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
CVSS3: 8.8
debian
больше 3 лет назад
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open ...
CVSS3: 8.8
fstec
больше 3 лет назад
Уязвимость библиотеки приложений exo среды рабочего стола XFCE, позволяющая нарушителю выполнить произвольный код