Related Vulnerabilities: CVE-2021-32563  

An issue was discovered in Thunar before 4.16.7. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.

Severity Medium

Remote No

Type Arbitrary command execution

Description

An issue was discovered in Thunar before 4.16.7. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.

AVG-1940 thunar 4.16.6-1 4.16.7-1 Medium Fixed

https://www.openwall.com/lists/oss-security/2021/05/09/2
https://gitlab.xfce.org/xfce/thunar/-/commit/495324deecaea458fce8cd3778fea23ecd57a044