CVE-2022-45062

CRITICAL

Xfce xfce4-settings <4.16.4-4.17.1 - Command Injection

Title source: llm

Description

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.

References (7)

Scores

CVSS v3 9.8
EPSS 0.0355
EPSS Percentile 87.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-88
Status published

Affected Products (4)

xfce/xfce4-settings < 4.16.4
xfce/xfce4-settings
debian/debian_linux
fedoraproject/fedora

Timeline

Published Nov 09, 2022
Tracked Since Feb 18, 2026