Description

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

Remediation

References

CVE-2014-1831

Related Vulnerabilities

PrestaShop Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-8823)

Dolibarr Improper Input Validation Vulnerability (CVE-2013-2093)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.4.2)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6170)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37067)

Severity

Low

Classification

CVE-2014-1831

Tags

Missing Update Known Vulnerabilities