| Package | Affected versions | Patched versions |
|---|---|---|
| xml-dt | = 0.60= 0.61= 0.62≤ 0.63 |
The (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_xml_##### temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free