Lucene search

K
osvGoogleOSV:USN-4700-1
HistoryJan 19, 2021 - 2:29 p.m.

pyxdg vulnerability

2021-01-1914:29:18
Google
osv.dev
10
pyxdg
input sanitization
vulnerability
arbitrary code

AI Score

6.4

Confidence

Low

EPSS

0.007

Percentile

80.1%

Alexandre D’Hondt discovered that PyXDG did not properly sanitize input.
An attacker could exploit this with a crafted .menu file to execute
arbitrary code.

AI Score

6.4

Confidence

Low

EPSS

0.007

Percentile

80.1%