Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-9474

Опубликовано: 26 авг. 2025
Источник: nvd
CVSS3: 4.5
CVSS2: 3.5
EPSS Низкий

Описание

A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and may be used.

EPSS

Процентиль: 2%
0.00013
Низкий

4.5 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-377

Связанные уязвимости

CVSS3: 4.5
github
6 месяцев назад

A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and may be used.

EPSS

Процентиль: 2%
0.00013
Низкий

4.5 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-377