Threats tagged 'ghsa-x3mf-3f47-pgpf'

MIME::Parser::FileUnder versions before 5.521 for Perl have a vulnerability where the parser reuses a pre-created output directory and follows symlinks within it. This behavior allows local users to redirect attachment writes by pre-creating directories with symlinks, potentially causing attachments to be written to unintended locations with the privileges of the parsing process.