CVE-2021-25322

🗓️ 10 Jun 2021 11:45:11Reported by suseType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 50 Views

CVE-2021-25322 UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty allows local attackers to escalate privileges to root

Reporter	Title	Published	Views	Family All 17
CNNVD	SUSE openSUSE 安全漏洞	10 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-25322 python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root	10 Jun 202111:45	–	cvelist
Debian CVE	CVE-2021-25322	10 Jun 202111:45	–	debiancve
EUVD	EUVD-2021-12219	7 Oct 202500:30	–	euvd
NVD	CVE-2021-25322	10 Jun 202112:15	–	nvd
OSV	OPENSUSE-SU-2024:11207-1 HyperKitty-web-1.3.4-5.2 on GA media	15 Jun 202400:00	–	osv
OSV	UBUNTU-CVE-2021-25322	10 Jun 202112:15	–	osv
Prion	Design/Logic Flaw	10 Jun 202112:15	–	prion
Positive Technologies	PT-2021-3364 · Opensuse · Opensuse Leap	17 Feb 202100:00	–	ptsecurity
Redos	ROS-2-1181	8 Sep 202100:00	–	redos

NVD

Node

python-hyperkitty_project python-hyperkittyRange≤1.3.2-lp152.2.3.1

AND

opensuse leapMatch15.2

Node

python-hyperkitty_project python-hyperkittyRange<1.3.4-5.1

AND

opensuse factoryMatch-

[
  {
    "product": "Leap 15.2",
    "vendor": "openSUSE",
    "versions": [
      {
        "lessThanOrEqual": "1.3.2-lp152.2.3.1",
        "status": "affected",
        "version": "python-HyperKitty",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Factory",
    "vendor": "openSUSE",
    "versions": [
      {
        "lessThan": "1.3.4-5.1",
        "status": "affected",
        "version": "python-HyperKitty",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi

21 Nov 2024 05:54Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.2

CVSS 3.16.8 - 7.8

EPSS0.00035

CWE-61