| Package | Affected versions | Patched versions |
|---|---|---|
| datafreedom-perl | = 0.1.7 |
dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free