Lucene search

K
githubGitHub Advisory DatabaseGHSA-PP74-39W2-V4W9
HistoryAug 25, 2021 - 9:01 p.m.

Permissions bypass in pleaser

2021-08-2521:01:44
CWE-59
CWE-340
GitHub Advisory Database
github.com
10

0.0004 Low

EPSS

Percentile

5.2%

pleaseedit in pleaser before 0.4.0 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.

CPENameOperatorVersion
pleaserlt0.4.0

0.0004 Low

EPSS

Percentile

5.2%