Lucene search
+L

37 matches found

Github Security Blog
Github Security Blog
added yesterday5 views

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Description src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts both compute their temporary working-file paths as: ts const randNum = Math.floorMath.random 0xFFFFFFFF; const srcFile = $os.tmpdir/etherpadexport$randNum.html; const destFile =...

5.6AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder