Lucene search
+L

1 matches found

OSV
OSV
added 2025/01/28 2:15 a.m.7 views

AZL-56075 CVE-2024-45339 affecting package vitess for versions less than 17.0.7-4

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

7.1CVSS7.2AI score0.0029EPSS
SaveExploits0References1
Rows per page
Query Builder