← Back

Gource

gource

Vendor: Gource • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-2449
1Gource
1Gource
Nov 21, 2024
Nov 7, 2019
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.