Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ffqj-7pgc-cmj5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

EPSS

Процентиль: 29%
0.00348
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-276
CWE-277

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 5 лет назад

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

CVSS3: 5.5
redhat
почти 6 лет назад

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

CVSS3: 4.7
nvd
больше 5 лет назад

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.

CVSS3: 4.7
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 4.7
debian
больше 5 лет назад

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for ...

EPSS

Процентиль: 29%
0.00348
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-276
CWE-277