Описание
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | needs-triage | |
| esm-apps-legacy/xenial | released | 0.10.7-1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 0.12.2-0ubuntu0.18.04.1+esm1 |
| esm-apps/focal | released | 0.12.11-1ubuntu1.20.04.1+esm1 |
| esm-apps/jammy | released | 4.16.3-1ubuntu0.1~esm1 |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| esm-apps/xenial | released | 0.10.7-1ubuntu0.1~esm1 |
| esm-infra-legacy/trusty | released | 0.10.2-3ubuntu1.14.04.2+esm1 |
Показывать по
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open ...
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
Уязвимость библиотеки приложений exo среды рабочего стола XFCE, позволяющая нарушителю выполнить произвольный код
ALT-PU-2023-1842: package `libexo` update to version 4.18.0-alt1
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3