Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21947
HistoryNov 13, 2019 - 4:24 a.m.

Symlink Attack

2019-11-1304:24:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

EPSS

0.002

Percentile

60.7%

github.com/helm/helm is vulnerable to symlink attack. During loading or packaging of a chart as a directory, a malicious chart containing symlinks could be used to obtain system files such as /etc/passwd. The vulnerability can also be used to cause a denial of service condition when special files such as /dec/urandom are referenced via the symlinks.

EPSS

0.002

Percentile

60.7%