Lucene search
K

8 matches found

Veracode
Veracode
added 2024/05/07 8:11 a.m.14 views

Race Condition

wordops is vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in stackpref.py. The vulnerability is due to calling os.open without a mode parameter during file creation, potentially allowing an attacker to manipulate the file before it is opened by the application...

7.7CVSS6.7AI score0.00181EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/05/06 12:30 a.m.19 views

GHSA-23QQ-P4GQ-GC2G WordOps has TOCTOU race condition

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

7.7CVSS7.5AI score0.00181EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2024/05/06 12:30 a.m.12 views

WordOps has TOCTOU race condition

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

7.7CVSS6.8AI score0.00181EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/05/06 12:15 a.m.5 views

PYSEC-2024-175

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

7.7CVSS7.5AI score0.00181EPSS
Exploits0References3
NVD
NVD
added 2024/05/06 12:15 a.m.12 views

CVE-2024-34528

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

7.7CVSS6.5AI score0.00181EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/05 12:0 a.m.10 views

CVE-2024-34528

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

6.8AI score0.00181EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/05 12:0 a.m.2 views

WordOps 安全漏洞

WordOps is an important toolset from WordOps that simplifies WordPress website and server management. A security vulnerability exists in WordOps 3.20.0 and earlier versions, which stems from the presence of a TOCTOU contention condition in wo/cli/plugins/stackpref.py because confpath os.open does...

7.7CVSS7.3AI score0.00181EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/05 12:0 a.m.19 views

CVE-2024-34528

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

6.8AI score0.00181EPSS
Exploits0References2
Rows per page
Query Builder