Symlink Attack Affecting suds package, versions [0,]
Threat Intelligence
EPSS
0.04% (6th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-SUDS-40185
- published 27 Jun 2013
- disclosed 27 Jun 2013
- credit Rolf Krahl
Introduced: 27 Jun 2013
CVE-2013-2217 Open this link in a new tabHow to fix?
There is no fixed version for suds.
Overview
Affected versions of this package are vulnerable to Symlink Attack via cache.py . When tempdir is set to None, It allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
CVSS Scores
version 3.1