CVE-2022-1537 file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/grunt

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privilege...

CVE-2022-1537

CVE-2022-1537 (GruntJS) involves a TOCTOU race in file.copy that enables arbitrary file writes in gruntjs/grunt before 1.5.3. An attacker with access to both source and destination directories could leverage a lower-privileged user’s ability to influence file operations (e.g., via a symlink to th...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

AZL-45141 CVE-2022-0436 affecting package js-jquery 3.5.0-4

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

DEBIAN-CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

UBUNTU-CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write

Description file.copy operations in GruntJS are vulnerable to a TOC-TOU race condition leading to arbitrary file write when an attacker can create a symlink just after deletion of the dest symlink by repeatedly calling ln -s /etc/shadow2 dest/shadow2 in a while loop but right before the symlink i...

CVE-2022-0436

CVE-2022-0436 describes a path traversal in gruntjs/grunt prior to 1.5.2. Connected advisories confirm Grunt’s vulnerability lies in filesystem path handling (notably in copy/IO paths), enabling a local attacker to traverse directories and read/write files. Affected product: Grunt (GruntJS task r...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

Path Traversal in gruntjs/grunt

Description Grunt is a JavaScript task runner, a tool used to automatically perform frequent tasks such as minification, compilation, unit testing, and linting. In GruntJS, file.copy operations in GruntJS are not protected against symlink traversal for both source and destination directories...