Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2v9g-x366-jgmx

Опубликовано: 29 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.

EPSS

Процентиль: 1%
0.00012
Низкий

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
nvd
9 дней назад

An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.

EPSS

Процентиль: 1%
0.00012
Низкий

7.8 High

CVSS3

Дефекты

CWE-276