USN-8856-1: Kdenlive, MLT vulnerability
AI Summary
It was discovered that Kdenlive allowed dangerous proxy parameters when processing attacker-controlled project files. An attacker could use this to execute arbitrary commands via the MLT framework's ante/post consumer properties.
Discussion
Sign in to join the discussion.
Loading comments…