GHSA-R5JH-Q2MW-GCX4 Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape

SanitizeFilePath in pkg/utils/utils.go validated that a path stayed under a safe directory by calling strings.HasPrefixpath, safedir. This is a lexical check, not a directory boundary check: /packages-extra/evil starts with /packages, so it passed. The function did not enforce a path-separator...

PT-2019-18616 · Kde +3 · Kde Kauth +3

Name of the Vulnerable Software and Affected Versions: KDE KAuth versions prior to 5.55 Description: The issue allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. This can cause crashes and trigger the decoding of arbitrary images wi...