Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mrc9-9rhm-fccj

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.

EPSS

Процентиль: 29%
0.00366
Низкий

7 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7
ubuntu
почти 7 лет назад

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.

CVSS3: 7
nvd
почти 7 лет назад

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.

CVSS3: 7
debian
почти 7 лет назад

xcfa before 5.0.1 creates temporary files insecurely which could allow ...

EPSS

Процентиль: 29%
0.00366
Низкий

7 High

CVSS3

Дефекты

CWE-362