npm/sync-exec CVE-2017-16024: medium 6.5, EPSS 2.52%
Tmp files readable by other users in sync-exec
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-38h8-x697-gh8q
- https://nvd.nist.gov/vuln/detail/CVE-2017-16024
- https://github.com/gvarsanyi/sync-exec/issues/17
- https://cwe.mitre.org/data/definitions/377.html
- https://github.com/advisories/GHSA-38h8-x697-gh8q
- https://www.npmjs.com/advisories/310
- https://www.owasp.org/index.php/Insecure_Temporary_File
CVE-2017-16024 · published · modified · JSON