imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of operation. Both of these are typically world-writable, and thus (for example) an attacker can modify imapsync’s cache and overwrite files belonging to the user who runs it.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | 3.18-community | noarch | imapsync | = 2.229-r0 | UNKNOWN |
Alpine | 3.19-community | noarch | imapsync | = 2.229-r0 | UNKNOWN |