Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perltidy 安全漏洞
Vulnerability Description
perlpritic是一个Perl源代码分析器；check-all-the-things是一个代码错误检查软件。Perltidy是其中的一套由软件开发者Steve Hancock所研发的Perl代码整理工具。 perlcritic、check-all-the-things和其他软件中使用的Perltidy 20160302及之前的版本中存在安全漏洞。本地攻击者可通过创建perltidy.ERR符号链接利用该漏洞覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A