Vulnerabilities (CVE)

Filtered by vendor Kleopatra Project Subscribe
Filtered by product Kleopatra
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-24972 3 Fedoraproject, Kleopatra Project, Opensuse 4 Fedora, Kleopatra, Backports Sle and 1 more 2023-12-10 6.5 MEDIUM 8.8 HIGH
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.