| Package | Affected versions | Patched versions |
|---|---|---|
| fvwm | ≤ 2.4.17≤ 2.5.8 |
CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free