Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Netflix Hollow 安全特征问题漏洞
Vulnerability Description
Netflix Hollow是美国Netflix公司的一个 Java 库和工具集，用于将内存数据集从单个生产者传播到许多消费者，以实现高性能只读访问。 Netflix Hollow 存在安全漏洞，攻击者可利用该漏洞可以预先创建具有广泛权限的目录。
CVSS Information
N/A
Vulnerability Type
N/A