Detections
Analytics
CVE-2021-31154
high
Description
pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.
References
https://github.com/advisories/GHSA-pp74-39w2-v4w9
https://www.openwall.com/lists/oss-security/2021/05/18/1