CVE-2022-41322

7.8HIGH

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, the

发布于: 9/23/2022更新于: 6/1/2025
在NVD查看在MITRE查看

描述

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.

AI分析AI驱动

受影响产品

kitty_projectkitty
fedoraprojectfedora
36
fedoraprojectfedora
37

参考资料