Descrição
The -go bug- command writes to two files with predictable names in the system temporary directory (for example, -/tmp-). An attacker with access to the temporary directory can create a symlink in one of these names, causing -go bug- to overwrite the target of the symlink.
CVSS 5.3EPSS 0.179%Risco 0.54
Ver fonte- Publicação
- 2026-05-07 20:16:43
- Versões afetadas
- unknown
- Tipo
- Core software
- Vetor
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N