2 matches found
Remote code execution
redhat-certification does not properly sanitize paths in rhcertStore.py:saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution...
7.5CVSS9.6AI score0.06104EPSS
SaveExploits0References3
CVE-2018-10870: Improper Limitation of a Pathname to a Restricted Directory
redhat-certification does not properly sanitize paths in rhcertStore.py:saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution...
9.8CVSS8.6AI score0.06104EPSS
SaveExploits0References3
20