Threats tagged 'ghsa-p7pp-h3gc-2v7m'

nnn versions through 5.3 have an insecure temporary file vulnerability in the pdfread and nuke plugins. This flaw allows local attackers to overwrite files by exploiting predictable temporary file paths in /tmp. Attackers can create symbolic links at these predictable paths, causing the victim's plugin to truncate and overwrite arbitrary files writable by the victim user.