Cockpit Files: Backlink Vulnerability

Cockpit Files has a postback link vulnerability. This vulnerability arises from Cockpit-Files’ improper handling of directories that contain symbolic links. Low-privilege local users can exploit the “Paste as owner” feature to change the ownership of files anywhere other than the intended...