| Package | Affected versions | Patched versions |
|---|---|---|
| kcron | ≤ 21.12.2 |
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free