Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-34490

Опубликовано: 05 мая 2024
Источник: nvd
CVSS3: 5.1
EPSS Низкий

Описание

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d.

EPSS

Процентиль: 4%
0.0002
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-377

Связанные уязвимости

CVSS3: 5.1
ubuntu
почти 2 года назад

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d.

CVSS3: 5.1
debian
почти 2 года назад

In Maxima through 5.47.0 before 51704c, the plotting facilities make u ...

CVSS3: 5.1
github
почти 2 года назад

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d.

EPSS

Процентиль: 4%
0.0002
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-377