CVE-2021-31155

7.8

HIGHCVSS v3

Published

May 27, 2021

CVSS v2

7.2 HIGH

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

umask

NPMconvert umask from string <-> number

< 0.4NVD

smikes/umask

GitHubConvert umask from string <-> number.

< 0.4NVD

edneville/please

GitLab

More on this CVE

NVD↗GitHub Advisory↗

please, sudo like program with regex support written in rust

NVD

Security Advisories

CVE-2021-31155

Description

More on this CVE