| Package | Affected versions | Patched versions |
|---|---|---|
| xdg-utils | = 1.1.0 |
The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free