CVE-2023-5557CWE-693

Tracker-miners: sandbox escape

High · published October 13, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.7th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2023-10-13T01:41Z
EPSS history
Timeline
  • 13 OCT 01:41Z
    Tracker-miners: sandbox escape
    cvelistv5