CVE-2021-31155

CVE-2021-31155

EPSS 0.4%

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://gitlab.com/edneville/please/-/tree/master/src/bin https://www.openwall.com/lists/oss-security/2021/05/18/1