Lucene search
Veracode Vulnerability DatabaseVERACODE:21807HistoryNov 05, 2019 - 7:39 a.m.
Insecure Temporary File Storage
2019-11-0507:39:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.0004 Low
EPSS
Percentile
12.7%
drift-mongodb-serverplugin uses an insecure temporary file storage when unpacking zip files. The files are unpacked to a world-writable directory which could potentially allow a local attacker to modify and tamper with the files, leading to unexpected behavior in the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| drift server mongodb plugin | le | 4.5.1 |
Related
cvelist
cvelist
CVE-2013-4374
2019-11-04 21:16:52
cve
cve
CVE-2013-4374
2019-11-04 22:15:10
prion
prion
Design/Logic Flaw
2019-11-04 22:15:00
nvd
nvd
CVE-2013-4374
2019-11-04 22:15:10