Back

CVE-2024-36053

May 19, 2024, 4:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Linux Mint mintupload package

  • through 4.2.0

Source

cve@mitre.org

Tags

cve@mitre.org
2024-05-19
CVE-2024-36053

CVE-2024-36053 details

Published : May 19, 2024, 4:15 p.m.
Last Modified : May 19, 2024, 4:15 p.m.

Description

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in check_connection, drop_data_received_cb, and Service.remove. A user can modify a service name in a ~/.linuxmint/mintUpload/services/service file.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
http://packages.linuxmint.com/pool/main/m/mintupload/ cve@mitre.org
https://github.com/linuxmint/mintupload/issues/42 cve@mitre.org
https://github.com/linuxmint/mintupload/issues/43 cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.