Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-84vm-7xwp-67qq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

monero-wallet-gui in Monero GUI 0.17.0.1 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.

monero-wallet-gui in Monero GUI 0.17.0.1 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.

EPSS

Процентиль: 16%
0.0005
Низкий

7.8 High

CVSS3

Дефекты

CWE-426
CWE-427

Связанные уязвимости

CVSS3: 7.8
nvd
больше 5 лет назад

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.

EPSS

Процентиль: 16%
0.0005
Низкий

7.8 High

CVSS3

Дефекты

CWE-426
CWE-427