Link Following in rply

2020-03-1120:56:34

Google

osv.dev

0.0004 Low

EPSS

Percentile

12.7%

python-rply before 0.7.4 insecurely creates temporary files.

CPENameOperatorVersion
rplyeq0.7.3
rplyeq0.6.0
rplyeq0.5.1
rplyeq0.5
rplyeq0.7.2
rplyeq0.7.1
rplyeq0.6.1
rplyeq0.7.0

Name	Operator	Version
rply	eq	0.7.3
rply	eq	0.6.0
rply	eq	0.5.1
rply	eq	0.5
rply	eq	0.7.2
rply	eq	0.7.1
rply	eq	0.6.1
rply	eq	0.7.0

References

www.openwall.com/lists/oss-security/2014/02/11/1

bugs.debian.org/cgi-bin/bugreport.cgi?bug=737627

github.com/alex/rply/commit/76d268a38c627bf4aebebcd064f5b6d380eb8b20

github.com/alex/rply/issues/42

nvd.nist.gov/vuln/detail/CVE-2014-1938

security-tracker.debian.org/tracker/CVE-2014-1938

0.0004 Low

EPSS

Percentile

12.7%

Related for OSV:GHSA-M8QC-MF6P-PFQ9