CVE-2021-39274

CVE-2021-39274 affects XeroSecurity Sn1per 9.0 (free version). The issue is insecure directory permissions (0777) set during installation/execution, enabling an unprivileged user to modify the main application and its configuration file, which can lead to arbitrary code execution with root privil...