Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/10/23 12:17 a.m.4 views

CVE-2025-61035

The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink...

7.7CVSS6.3AI score0.00135EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.2 views

EUVD-2025-35578

The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink...

5.8AI score0.00135EPSS
Exploits0References4
Snyk
Snyk
added 2025/10/22 2:47 p.m.4 views

Incorrect Permission Assignment for Critical Resource

Overview seffaflik is an EPİAŞ tarafından Şeffaflık Platformunda yayımlanmakta olan verileri çekmek için tasarlanmış Python kütüphanesi Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the creation of .kimlik and .seffaflik files with...

8.5CVSS7AI score0.00135EPSS
Exploits0References2
OSV
OSV
added 2025/10/22 2:15 p.m.1 views

CVE-2025-61035

The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink...

7.7CVSS5.9AI score
Exploits0References3
NVD
NVD
added 2025/10/22 2:15 p.m.3 views

CVE-2025-61035

The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink...

7.7CVSS0.00135EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/22 12:0 a.m.6 views

CVE-2025-61035

The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink...

0.00135EPSS
Exploits0References3
CVE
CVE
added 2025/10/22 12:0 a.m.8 views

CVE-2025-61035

The CVE-2025-61035 issue affects the Python library seffaflik (through 0.0.9). The root cause is insecure file handling: .kimlik and .seffaflik are created with overly permissive permissions (0777 and 0775) and .kimlik is written without symlink checks. This enables local attackers to access sens...

7.7CVSS5.9AI score0.00135EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

seffaflik 安全漏洞

seffaflik is a Python library by the individual developer of nurisensoy. A security vulnerability exists in seffaflik 0.0.9 and earlier versions, which stems from improperly set default permissions and lack of symbolic link checking in .kimlik and .seffaflik files, which could lead to information...

7.7CVSS6.1AI score0.00135EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/22 12:0 a.m.2 views

CVE-2025-61035

The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink...

5.9AI score0.00135EPSS
Exploits0References3
Rows per page
Query Builder