Improper Link Resolution Before File Access in Suds
Discription

cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.Read More

Back to Main

Subscribe for the latest news: