CVE-2021-32563
—CVSS 3.1
9.8 critical
EPSS
3%p87
Published
()
Modified
Description
An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.
- Vendors
- xfce
- Products
- thunar
- Weakness
- CWE-913
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.