Threats tagged 'ghsa-69c2-wcm2-5698'

Canop dysk versions before 3.8.2 have a terminal escape sequence injection vulnerability. This flaw allows local users to inject control sequences via crafted mount metadata that is rendered unsanitized in table and CSV outputs. By creating FUSE mounts with escape sequences in mount-point names or filesystem names, attackers can cause spoofed or hidden output and change the terminal window title when another user runs dysk.