Lucene search

K
osvGoogleOSV:GHSA-5PJJ-7M4P-WFH2
HistoryMay 17, 2022 - 2:04 a.m.

ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack

2022-05-1702:04:28
Google
osv.dev
4
ocrodjvu
vulnerability
debian gnu/linux
arbitrary file modification
symlink attack
cuneiform
ocr engine
software

AI Score

6.8

Confidence

High

EPSS

0

Percentile

5.1%

ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.

AI Score

6.8

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:GHSA-5PJJ-7M4P-WFH2