Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-66p9-q2qw-cpw8

Опубликовано: 07 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1
CVSS3: 3.3

Описание

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or write policy-denied files.

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or write policy-denied files.

EPSS

Процентиль: 1%
0.00103
Низкий

1 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 3.3
ubuntu
7 дней назад

(ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulne ...)

CVSS3: 3.3
redhat
9 дней назад

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or write policy-denied files.

CVSS3: 3.3
nvd
9 дней назад

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or write policy-denied files.

CVSS3: 3.3
debian
9 дней назад

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulne ...

EPSS

Процентиль: 1%
0.00103
Низкий

1 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-59