CVE-2022-25255

Katalog CVE

CVSS 7.8 · High EPSS 0,33%

Kerentanan pada qt. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

Rincian

Terbit di NVD

16 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://codereview.qt-project.org/c/qt/qtbase/+/393113 issue tracking · patch · advisory vendor
• https://codereview.qt-project.org/c/qt/qtbase/+/394914 patch · advisory vendor
• https://codereview.qt-project.org/c/qt/qtbase/+/396020 patch · release notes · advisory vendor
• https://download.qt.io/official_releases/qt/5.15/qprocess5-15.diff patch · advisory vendor
• https://download.qt.io/official_releases/qt/6.2/qprocess6-2.diff patch · advisory vendor