Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
added 2025/09/17 7:55 p.m.11 views

Dragonfly's directories created via os.MkdirAll are not checked for permissions

Impact DragonFly2 uses the os.MkdirAll function to create certain directory paths with specific access permissions. This function does not perform any permission checks when a given directory path already exists. This allows a local attacker to create a directory to be used later by DragonFly2 wi...

5.1CVSS6.8AI score0.00106EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder