Поиск уязвимостей
Количество 8
Количество 8
GHSA-hrxh-9w67-g4cv
Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
CVE-2024-52522
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2.
CVE-2024-52522
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2.
CVE-2024-52522
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2.
CVE-2024-52522
Rclone is a command-line program to sync files and directories to and ...
ALT-PU-2025-8008
ALT-PU-2025-8008: package `rclone` update to version 1.69.1-alt1
ALT-PU-2025-7927
ALT-PU-2025-7927: package `rclone` update to version 1.69.1-alt1
openSUSE-SU-2026:20620-1
Security update for rclone
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hrxh-9w67-g4cv Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
 | CVE-2024-52522 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2. | 0% Низкий | почти 2 года назад | |
 | CVE-2024-52522 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2. | CVSS3: 6.8 | 0% Низкий | почти 2 года назад |
 | CVE-2024-52522 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2. | 0% Низкий | почти 2 года назад | |
| CVE-2024-52522 Rclone is a command-line program to sync files and directories to and ... | 0% Низкий | почти 2 года назад | |
| ALT-PU-2025-8008 ALT-PU-2025-8008: package `rclone` update to version 1.69.1-alt1 | 0% Низкий | больше 1 года назад | |
| ALT-PU-2025-7927 ALT-PU-2025-7927: package `rclone` update to version 1.69.1-alt1 | 0% Низкий | больше 1 года назад | |
 | openSUSE-SU-2026:20620-1 Security update for rclone | 7 месяцев назад |
Уязвимостей на страницу