Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is "$(touch b)" -- this will create a file called b in the home folder.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
KDE Plasma Workspace 安全漏洞
Vulnerability Description
KDE Plasma Workspace是KDE社区开发的所有图形环境的总称,是KDE Software Compilation 4(桌面环境的最新系列)的一部分。 KDE Plasma Workspace 5.12.0之前版本中的soliduiserver/deviceserviceaction.cpp文件存在安全漏洞。攻击者可利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A