Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36012
HistoryJun 16, 2022 - 6:30 a.m.

Privilege Escalation

2022-06-1606:30:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.0004 Low

EPSS

Percentile

12.6%

octokit is vulnerable to privilege escalation. The vulnerability exists because the script file uses -rw-rw-rw- (i.e. 0666) permission instead of rw-r--r--(i.e. 0644), allowing an attacker to modify the world-writable files.

CPENameOperatorVersion
octokitle4.24.0
octokitle4.24.0

0.0004 Low

EPSS

Percentile

12.6%