Threats tagged 'ghsa-2qp8-23fp-hmf7'

The xmlwf tool in libexpat versions through 2.10.0 has a symlink following vulnerability. When run with the -d output mode, it opens files using fopen("wb"), which follows symbolic links. This allows local attackers with write access to the output directory to create a symlink at the expected output filename, potentially truncating or overwriting files writable by the xmlwf user.