In breve
- CVE-2011-2765 è una vulnerabilità ALTO (CVSS 7.5) che riguarda pyro, pyro (pyro project).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.7% delle vulnerabilità.
- Correzione: aggiornare a 3.15 o successiva.
| Package | Affected versions | Patched versions |
|---|
| pyro PyPI | < 3.15
| 3.15
|
| pyro | < 3.15
| 3.15
|
Description
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
NVD description
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free