CVE-2021-31154: Permissions bypass in pleaser

August 25, 2021 (updated April 3, 2023)

pleaseedit in pleaser before 0.4.0 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.

References

crates.io/crates/pleaser
github.com/advisories/GHSA-pp74-39w2-v4w9
gitlab.com/edneville/please
gitlab.com/edneville/please/-/tree/master/src/bin
nvd.nist.gov/vuln/detail/CVE-2021-31154
rustsec.org/advisories/RUSTSEC-2021-0102.html
www.openwall.com/lists/oss-security/2021/05/18/1

Code Behaviors & Features

Detect and mitigate CVE-2021-31154 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →