Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-0781

Опубликовано: 28 янв. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.6

Описание

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

РелизСтатусПримечание
devel

not-affected

1:2020.3.19+dfsg-1
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

esm-apps/xenial

needed

focal

ignored

end of standard support, was needs-triage
jammy

needed

noble

needed

oracular

ignored

end of life, was needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

1:2020.3.19+dfsg-1
esm-apps/bionic

released

1:2018.1.1+dfsg-1ubuntu0.1~esm1
esm-apps/focal

released

1:2019.1.1+dfsg-3ubuntu0.1~esm1
esm-apps/jammy

released

1:2020.3.6+dfsg-1ubuntu0.1~esm2
esm-apps/noble

released

1:2020.3.18+dfsg-2.1ubuntu0.1~esm1
esm-apps/xenial

released

3.4.0-3ubuntu0.1~esm1
focal

ignored

end of standard support, was needs-triage
jammy

needed

noble

needed

oracular

ignored

end of life, was needs-triage

Показывать по

EPSS

Процентиль: 25%
0.00084
Низкий

8.6 High

CVSS3

Связанные уязвимости

CVSS3: 8.6
nvd
около 1 года назад

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

CVSS3: 8.6
debian
около 1 года назад

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily ...

CVSS3: 8.6
github
около 1 года назад

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

EPSS

Процентиль: 25%
0.00084
Низкий

8.6 High

CVSS3