CVE-2022-48682

In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink

Medium · published April 26, 2024

CVSS v3.1
6.0
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:L/A:H/C:N/I:H/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Published
2024-04-26T00:00Z
EPSS history
Timeline
  • 26 APR 00:00Z
    In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink
    cvelistv5