Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f8w9-p7h4-f9jm

Опубликовано: 19 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.8

Описание

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

EPSS

Процентиль: 1%
0.00092
Низкий

1.8 Low

CVSS4

Дефекты

CWE-427

Связанные уязвимости

ubuntu
3 месяца назад

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

nvd
3 месяца назад

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

msrc
3 месяца назад

Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

debian
3 месяца назад

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS b ...

suse-cvrf
около 1 месяца назад

Security update for libqt4

EPSS

Процентиль: 1%
0.00092
Низкий

1.8 Low

CVSS4

Дефекты

CWE-427