21 matches found
filelock: ReadWriteLock follows a symlink at the lock path into SQLite
Summary ReadWriteLock and AsyncReadWriteLock resolve the lock path with pathlib.Path.resolve and pass it to sqlite3.connect without refusing a symlink. A local user who can create names in the lock's directory, such as /tmp or a shared cache, can plant a symlink at the lock path and make the...
6.1CVSS5.8AI score0.00232EPSS
SaveExploits1References5Affected Software1
20