Threats tagged 'ghsa-wrmv-w7w7-jxc9'

Bastille versions through 1.4.4 have a symlink following vulnerability in the cp.sh, rcp.sh, and jcp.sh subcommands. This flaw allows jailed users to escape their jail isolation by planting symbolic links that cause administrator-run copy operations to overwrite or read host files with root privileges.