NetSight
IP …
high8.8

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.

Impact

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.

Affected products

VendorProductAffected versions
XfceExo
before 4.16.4
from 4.17.0 before 4.17.2
DebianDebian Linux
Versions 9.0, 10.0, 11.0

References