1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
GNU nano before 2.2.4 does not verify whether a file has been changed
before it is overwritten in a file-save operation, which allows local
user-assisted attackers to overwrite arbitrary files via a symlink attack
on an attacker-owned file that is being edited by the victim.