VYPR
← All advisories
Critical severity9.8OSV Advisory· Published Jun 19, 2018· Updated Jun 17, 2026

CVE-2018-12562

CVE-2018-12562

Description

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary. The shell evaluates wildcards (such as in an injected string:/home/../tmp/* string).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Craig Drummond/CantataOSV2 versions
    v2.1.0, v2.2.0, v2.3.0, …+ 1 more
    • (no CPE)range: v2.1.0, v2.2.0, v2.3.0, …
    • (no CPE)range: <=2.3.1
  • Cantata Project/Cantata
    cpe:2.3:a:cantata_project:cantata:*:*:*:*:*:*:*:*
    Range: <=2.3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.