{"id":"CVE-2018-12562","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-12562","generatedAt":"2026-10-28T20:26:30.515Z","title":"The shell evaluates wildcards (such as in an injected string:/home/../tmp/* string).","description":"An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary. The shell evaluates wildcards (such as in an injected string:/home/../tmp/* string).","published":"2018-06-19T05:29:00.000Z","lastModified":"2026-06-17T01:37:59.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-20"],"affected":["cantata project/cantata"],"epss":{"score":0.01661,"percentile":0.76554,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2018/06/18/1","tags":["Mailing List","Technical Description"],"source":"cve@mitre.org"},{"url":"https://github.com/CDrummond/cantata/commit/afc4f8315d3e96574925fb530a7004cc9e6ce3d3","tags":["Patch","Technical Description"],"source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2018/06/18/1","tags":["Mailing List","Technical Description"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/CDrummond/cantata/commit/afc4f8315d3e96574925fb530a7004cc9e6ce3d3","tags":["Patch","Technical Description"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-12562","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}