CVE-2022-41322

7.8HIGH

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, the

公開日: 9/23/2022更新日: 6/1/2025
NVDで表示MITREで表示

説明

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.

AI分析AIによる分析

影響を受ける製品

kitty_projectkitty
fedoraprojectfedora
36
fedoraprojectfedora
37

参照