Lucene search

K
cvelistHackeroneCVELIST:CVE-2022-32207
HistoryJul 07, 2022 - 12:00 a.m.

CVE-2022-32207

2022-07-0700:00:00
CWE-840
hackerone
raw.githubusercontent.com
2

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the updated file accessible to more users than intended.