CVE-2014-2387

CVE-2014-2387 affects Pen 0.18.0, which has insecure temporary file creation. The vulnerability allows local attackers to exploit symlink attacks via temporary files such as "/tmp/webfile.html" and "/tmp/penctl.cgi", potentially corrupting system files. The provided documents state the issue but ...