CVE-2021-31154

ALTO 7.8CVE-2021-31154 · Published 27/05/2021 · updated 17/06/2026

In breve

CVE-2021-31154 è una vulnerabilità ALTO (CVSS 7.8) che riguarda pleaseedit (pleaseedit project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 40.8% delle vulnerabilità.
Correzione: aggiornare a 0.4 o successiva.

Package	Affected versions	Patched versions
pleaseedit pleaseedit_project	`< 0.4`	`0.4`

Description

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.

References

gitlab.com/edneville/please/-/tree/master/src/bin · Third Party Advisory
openwall.com/lists/oss-security/2021/05/18/1 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free