When curl < 7.84.0 saves cookies,... CVE-2022-32207
7.5
AV
AC
AU
C
I
A
发布：
2022-07-07
修订：
2024-03-27
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有22条受影响产品信息
