| Package | Affected versions | Patched versions |
|---|---|---|
| fabric | < 1.1.0 | 1.1.0 |
| fabric | = 0.9= 0.9.1= 0.9.2= 0.9.3= 0.9.4= 0.9.5= 0.9.6= 0.9.7= 1.0.0= 1.0.1≤ 1.0.2 |
Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free