6 matches found
theshit vulnerable to unsafe loading of user-owned Python rules when running as root
Impact Vulnerability Type: Local Privilege Escalation LPE / Arbitrary Code Execution. The application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when executed with elevated privileges. If the...
6.7CVSS7.4AI score0.00122EPSS
SaveExploits0References5Affected Software1
20