Описание
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2023-28371
- https://github.com/Stellarium/stellarium/commit/1261f74dc4aa6bbd01ab514343424097f8cf46b7
- https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78
- https://github.com/Stellarium/stellarium/commit/eba61df3b38605befcb43687a4c0a159dbc0c5cb
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REDZB5J7WDN2P3NYWFO2NNJXSTOFUUKM
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQ4ZGY5MDDHBEOQTD4IIA2RFID3ATPXA
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 3 лет назад
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
CVSS3: 9.8
nvd
больше 3 лет назад
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
CVSS3: 9.8
debian
больше 3 лет назад
In Stellarium through 1.2, attackers can write to files that are typic ...
CVSS3: 9.8
altlinux
почти 2 года назад
ALT-PU-2024-15503: package `stellarium` update to version 24.3-alt0.p10.1