CVE-2011-2651: Marcus Schafer Kiwi

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.

Affected products

• Marcus Schafer Kiwi: up to and including 3.74.1
• Novell Suse Studio Onsite: version 1.1 only

Published 2011-08-23. Last modified 2026-06-16.