GHSA-4r2w-w73w-36jmMediumCVSS 4.5

eyeD3 is vulnerable to arbitrary file modification via symlink attack

Published
May 14, 2022
Last Modified
August 4, 2023

🔗 CVE IDs covered (1)

CVE-2014-1934 →

📋 Description

tag.py in eyeD3 (aka python-eyed3) 0.7.5 and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.

🎯 Affected products1

  • pip/eyeD3:< 0.7.5

🔗 References (7)