USN-8857-1: KCoreAddons vulnerability
AI Summary
It was discovered that KCoreAddons incorrectly handled shell argument quoting in KShell::quoteArgs. The parsing did not adequately handle shell metacharacters, which could lead to a shell escape. An attacker could possibly use this issue to execute arbitrary commands in applications that relied on this method to handle user input.
Discussion
Sign in to join the discussion.
Loading comments…