Kleopatra
1 CVEs
product
Monthly
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
RCE
Kleopatra
Fedora
Backports Sle
Leap
NVD
CVSS 3.1
8.8
EPSS
4.7%
EPSS 5%
CVSS 8.8
HIGH
POC
PATCH
This Week
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
RCE
Kleopatra
Fedora
+2
NVD