CVE-2021-31155

ALTO 7.8CVE-2021-31155 · Published 27/05/2021 · updated 17/06/2026

In breve

CVE-2021-31155 è una vulnerabilità ALTO (CVSS 7.8) che riguarda umask (umask project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.41%, superiore al 35.3% delle vulnerabilità.
Correzione: aggiornare a 0.4 o successiva.

Package	Affected versions	Patched versions
umask umask_project	`< 0.4`	`0.4`

Description

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

References

gitlab.com/edneville/please/-/tree/master/src/bin · Third Party Advisory
openwall.com/lists/oss-security/2021/05/18/1 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free