#cwe-363

共收录 8 条相关情报。

← 返回所有主题

安全公告2026-10-23 发布INFO

filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

CVE-2026-112914

When a soft-lock stale break finds that the marker (the lock file at ``) it renamed aside was a live one recreated by a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-59 #cwe-363 #severity:medium

安全公告2026-10-23 发布INFO

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

CVE-2026-112940

`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) hand SQLite a name they do not control.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-59 #cwe-363 #severity:high

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attack...

CVE-2026-112940

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the da

历史摘要 · 未重新核验 · NVD

#cve #cwe-363

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside, allowing another local us...

CVE-2026-112914

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker

历史摘要 · 未重新核验 · NVD

#cve #cwe-363

安全公告2026-09-18 发布INFO

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition...

CVE-2026-91205

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-363 #severity:medium

安全公告2026-09-18 发布INFO

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing...

CVE-2026-91203

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a syml

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-363 #severity:medium

漏洞预警2026-09-18 发布INFO

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent d...

CVE-2026-91205

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation

历史摘要 · 未重新核验 · NVD

#cve #cwe-363

漏洞预警2026-09-18 发布INFO

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations suc...

CVE-2026-91203

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a syml

历史摘要 · 未重新核验 · NVD

#cve #cwe-363