An issue exists in the cantata-mounter D-Bus service in Cantata up to and including 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cantata project cantata |