dde-api-proxy vulnerabilities
1 known vulnerability in dde-api-proxy from Deepin. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
dde-api-proxy: Improper Verification of Source of a Communication Channel
An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus