25 matches found
Filelock: ReadWriteLock Follows A Symlink At The Lock Path Into SQLite
Summary "ReadWriteLock" and "AsyncReadWriteLock" resolve the lock path with "pathlib.Path.resolve" and pass it to "sqlite3.connect" without refusing a symlink. A local user who can create names in the lock's directory, such as "/tmp" or a shared cache, can plant a symlink at the lock path and mak...
6.1CVSS5.8AI score0.00232EPSS
SaveExploits1Affected Software1
20