Lucene search

K
githubGitHub Advisory DatabaseGHSA-VC5P-J8VW-MC6X
HistoryAug 25, 2021 - 9:01 p.m.

Permissions bypass in pleaser

2021-08-2521:01:47
CWE-269
CWE-279
GitHub Advisory Database
github.com
14

0.0004 Low

EPSS

Percentile

5.2%

Failure to normalize the umask in pleaser before 0.4.0 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

CPENameOperatorVersion
pleaserlt0.4.0

0.0004 Low

EPSS

Percentile

5.2%