CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...7.8 High
- keepalivedkeepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file...4.7 Medium
- [unknown] glusterfs, debian linux, redhat enterprise linux +2 moreIt was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and...8.8 High
- jekyllrb jekyllJekyll allows attackers to access arbitrary files by specifying a symlink7.5 High
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink...8.8 High
- base-files project base-files, canonical ubuntu linux +1 moreInsecure temporary file use in base-files7.0 High
- pyro project pyroInsecure temporary file handling7.5 High
- kaspersky lab kraftway, kraftway 24f2xg router firmware +1 moreDenial of service via crafting malicious link and sending it to a privileged user can cause...6.5 Medium
- rpm yum-utils, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to...8.8 High
- nagiosA privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when...6.7 Medium
- red hat postgresql init script, redhat enterprise linux desktop, enterprise linux server +3 more +5 morePrivilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An...6.5 Medium
- foreman katello-debug, theforeman katello, redhat satellite +1 more +3 moreA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...7.3 High
- h2database h2An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function...6.5 Medium
- check mk project mkCheck_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a...5.5 Medium
- htslibIn HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary...4.7 Medium
- dialogic powermedia xmsInformation leakage vulnerability in the administrative console in Dialogic PowerMedia XMS...7.5 High
- linuxmint cinnamon, debian linux +1 moreAn issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs...8.1 High
- tar project tarArbitrary file overwrite in tar-rs7.5 High
- rubyzip project rubyzip, debian linux, redhat cloudforms +2 moreRubyzip gem contains a Directory Traversal vulnerability in zip file component9.8 Critical
- phusion passengerPhusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability9.8 Critical
- perl, apple mac os x, archive\ \ +6 more +8 moreIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...7.5 High
- debian linux, kde plasma, opensuse leap +2 morekwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary...7.8 High
- cylance cylanceprotectIn Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges...7.8 High
- fedoraproject fedoraThe fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1...7.1 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue...5.5 Medium
- intel thermaldThe main function in android_main.cpp in thermald allows local users to write to arbitrary files...5.5 Medium
- atlassian bitbucket, bitbucket server +1 moreIn browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed...9.9 Critical
- dell emc spring boot, spring boot +1 moreModerate severity vulnerability that affects org.springframework.boot:spring-boot5.9 Medium
- kubernetesIn Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4...8.8 High
- rubygemsRubyGems Link Following vulnerability7.5 High
- opensuse open buildservice, suse open build service +1 moreopen build service source server symlink exploitation via source patch6.3 Medium
- selinux project policycoreutils, selinux, redhat enterprise linux +2 moreContext relabeling of filesystems is vulnerable to symbolic link attack, allowing a local,...4.4 Medium
- opensuse open build serviceOBS worker VM escape via relative symbolic links5.0 Medium
- openr opentmpfilesOpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows...5.5 Medium
- systemd project systemd, canonical ubuntu linux, opensuse leap +2 moresystemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path...7.8 High
- fishshell fish, fedoraproject fedora +1 morefish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp...7.8 High
- systemd project systemd, debian linux, opensuse leap +2 moresystemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on...7.8 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is...4.7 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe printing process can bypass local access protections to read files available through symlinks...5.3 Medium
- jdennis keycloak-httpd-client-installkeycloak-httpd-client-install symlink attack vulnerability5.5 Medium
- vladtheenterprising project vladtheenterprisingVladTheEnterprising allows local users to write to arbitrary files via a symlink attack5.5 Medium
- clipboard project clipboardclipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a...5.5 Medium
- redhat openshift(1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package...7.8 High
- syncthingSyncthing vulnerable to symlink traversal and arbitrary file overwrite7.5 High
- rawstudio, fedoraproject fedora +1 moreThe rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to...5.5 Medium
- arqbackup arqThe setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to...7.4 High
- x libxfont, canonical ubuntu linux, debian linux +2 moreIn libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read)...5.5 Medium
- postgresqlPostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x...6.7 Medium
- postgresqlThe Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the...5.5 Medium
- Show moreLoading…