← Voltar para CVEs

CVE-2017-8418

N/A

Descricao

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado5/2/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

rubocop_project:rubocop

Fraquezas (CWE)

CWE-668

Referencias

http://www.openwall.com/lists/oss-security/2017/05/01/14(cve@mitre.org)

https://github.com/bbatsov/rubocop/issues/4336(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2017/05/01/14(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/bbatsov/rubocop/issues/4336(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.