Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12561

Опубликовано: 19 июн. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cantata_project:cantata:*:*:*:*:*:*:*:*
Версия до 2.3.1 (включая)

EPSS

Процентиль: 57%
0.00348
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL.

CVSS3: 8.8
debian
больше 7 лет назад

An issue was discovered in the cantata-mounter D-Bus service in Cantat ...

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL.

EPSS

Процентиль: 57%
0.00348
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20