exploitDog

GHSA-7v54-gcwf-r4xw

Опубликовано: 21 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

Ссылки

EPSS

Процентиль: 68%

0.00563

Низкий

CVE ID

Связанные уязвимости

CVE-2010-2449

CVSS3: 6.5

ubuntu

больше 6 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

CVE-2010-2449

CVSS3: 6.5

nvd

больше 6 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

CVE-2010-2449

CVSS3: 6.5

debian

больше 6 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID. ...

EPSS

Процентиль: 68%

0.00563

Низкий

CVE ID