GHSA-vpqp-hx68-p2wxMediumCVSS 6.2

Improper Link Resolution Before File Access in Suds

Published
May 14, 2022
Last Modified
October 28, 2024

🔗 CVE IDs covered (1)

CVE-2013-2217 →

📋 Description

cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

🎯 Affected products2

  • pip/suds:<= 0.4
  • pip/suds-py3:>= 0, < 1.4.4.1

🔗 References (8)