by Kastro
Paper/Archive/CVE-2022-45062

CVE-2022-45062

mitre — In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.

EPSS 2%public exploitCVSS 9.8
critical.is priorityof 100
54
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.7.747 × 2014.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgitlab.xfce.org/xfce/xfce4-settings/-/issues/390refgitlab.xfce.org/xfce/xfce4-settings/-/commit/55e3c5fb667e96ad1412cf249879262b369d28d7refgitlab.xfce.org/xfce/xfce4-settings/-/commit/f34a92a84f96268ad24a7a13fd5edc9f1d526110refgitlab.xfce.org/xfce/xfce4-settings/-/tagsadvisorydebian.org/security/2022/dsa-5296advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGTGTTPFHDUB3EZHVKDK4H32QUUYPPFFadvisorysecurity.gentoo.org/glsa/202305-05