PT-2017-7889

Name of the Vulnerable Software and Affected Versions perltidy versions prior to 20160302 perlcritic affected versions not specified check-all-the-things affected versions not specified Description The issue allows local users to overwrite arbitrary files by creating a symlink. This can be...

CVE-2016-10374: Improper Link Resolution Before File Access

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...