~ / search / GHSA-9347-9w64-q5wp

GHSA-9347-9w64-q5wp

Jython Improper Access Restrictions vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-2027

Packages

EcosystemPackageAffectedFixed in
Maven org.python:jython-standalone < 2.7.2b3 2.7.2b3

Details

As written in the advisory (Markdown source, shown as plain text).

Jython before 2.7.2b3 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.