CVE-2022-25255

The CVE-2022-25255 flaw affects Qt5/Qt6 QtBase (QtBase Open Source) on Linux/UNIX: QProcess could execute a binary from the current working directory when it isn’t in PATH. Affected are Qt 5.9.x–5.15.x before 5.15.9 and Qt 6.x before 6.2.4. Root cause is QProcess selecting an executable from the ...

CVE-2022-25255

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH...

PT-2022-1644

Name of the Vulnerable Software and Affected Versions Qt versions 5.9.x through 5.15.x before 5.15.9 Qt versions 6.x before 6.2.4 Description The issue is related to the QProcess in Qt, which could execute a binary from the current working directory when not found in the PATH on Linux and UNIX...

CVE-2022-25255: Undefined Security Weakness

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH...

Qt 安全漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...

CVE-2022-23853

The LSP Language Server Protocol plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file th...

PT-2022-4784

Name of the Vulnerable Software and Affected Versions KDE Kate versions prior to 21.12.2 KTextEditor versions prior to 5.91.0 Description The issue is related to insufficient input validation in the Language Server Protocol plugin. This can allow a remote attacker to access confidential data,...

CVE-2022-23853

The LSP Language Server Protocol plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file th...

CVE-2022-23853: Uncontrolled Search Path Element

The LSP Language Server Protocol plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file th...

CVE-2022-23853

The LSP Language Server Protocol plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file th...