Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-5c7k-2w7y-53a4 |
|---|
| Summary | Security researcher Ash reported an issue where the
extracted files for updates to existing files are not read only during the
update process. This allows for the potential replacement or modification of
these files during the update process if a malicious application is present on
the local system. |
|---|
| Aliases |
|
|---|
| Fixed_packages |
|
|---|
| Affected_packages |
|
|---|
| References |
|
|---|
| Weaknesses |
|
|---|
| Exploits |
|
|---|
| Severity_range_score | null |
|---|
| Exploitability | null |
|---|
| Weighted_severity | null |
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-5c7k-2w7y-53a4 |
|---|