1 matches found
rsync: rsync: Directory escape via TOCTOU race condition in rrsync
A time-of-check to time-of-use TOCTOU race condition flaw in the rrsync restricted shell wrapper allows authenticated remote attackers to escape directory restrictions. By replacing a validated path component with a symbolic link prior to file transfer execution, an attacker can bypass intended...
8.6CVSS6.7AI score0.00374EPSS
SaveExploits0References7
20