CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server

published June 13, 2022

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01700 · 77.0th percentile
Published
2022-06-13T22:01Z
EPSS history
Timeline
  • 13 JUN 22:01Z
    XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server
    cvelistv5