En bref
- CVE-2011-2765 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant pyro, pyro (pyro project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.2%, plus élevée que 82.7% des vulnérabilités.
- Correctif : mettre à jour vers 3.15 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| pyro PyPI | < 3.15
| 3.15
|
| pyro | < 3.15
| 3.15
|
Description
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
NVD description
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free