Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xrr4-74mc-rpjc

Опубликовано: 21 авг. 2018
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Pyro mishandles pid files in temporary directory locations and opening the pid file as root

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

Пакеты

Наименование

pyro

pip
Затронутые версииВерсия исправления

< 3.15

3.15

EPSS

Процентиль: 62%
0.00433
Низкий

7.5 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

CVSS3: 7.5
nvd
больше 7 лет назад

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

CVSS3: 7.5
debian
больше 7 лет назад

pyro before 3.15 unsafely handles pid files in temporary directory loc ...

EPSS

Процентиль: 62%
0.00433
Низкий

7.5 High

CVSS3

Дефекты

CWE-59