CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory

published May 27, 2021

CVSS
—
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.6th percentile
Published
2021-05-27T12:10Z
EPSS history
Timeline
  • 27 MAY 12:10Z
    pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory
    cvelistv5