CVE-2024-47884

CVE-2024-47884 affects foxmarks, a CLI read-only interface for Firefox bookmarks/history. The root cause is insecure temporary file handling: NamedTempFile is created with 0600, but after copying the Firefox database the file’s permissions are copied as 0644, exposing the data to any local user. ...